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ABSTRACT 


We  consider  the  problem  of  tlie  translation  of  view  updates  to  database  updates.  Our 
research  uses  an  algebraic  approach  in  order  to  classify  different  properties  of  views  with 
respect  to  the  treatment  of  updates.  In  our  classification,  special  attention  is  paid  to  a  class 
of  views  that  we  call  “consistent”.  Informally  speaking,  a  consistent  view  is  a  view  with  the 
following  property:  if  the  effect  of  a  view  update  program  on  a  view  state  is  determined, 
then  the  corros])onding  database  update  is  unambiguously  determined.  Thus,  in  order  to 
know  liow  to  translate  a  given  view  update  into  a  database  update,  it  is  not  necessary  to 
taiow  the  sequence  of  particular  operations  of  the  view  update  program;  it  is  sufficient  to 
be  aware  of  a  functional  specification  of  such  a  program.  We  show  how  conditional  updates 
can  be  modeled  and  prove  that  consistent  views  have  a  number  of  interesting  properties 
with  respect  to  the  concurrency  of  update  transactions.  Moreover,  we  show  that  the  class  of 
consistent  views  includes,  as  a  particul;u-  subset,  the  class  of  views  which  translate  updates 
under  cnmntenencc  of  a  constant  coniplcment.  However,  we  give  examples  of  import, ant 
realistic  views  that  are  consistent  but  do  not  translate  updates  under  constant  complement. 
The  results  of  Bancilhon  and  Spyratos  [ACM-TODS  6:4,  1981]  arc  generalized  in  order  to 
capture  the  update  semantics  of  the  entire  class  of  consistent  views. 
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1.  INTRODUCTION 


A  view  facility  ia  an  important  part  of  m<my  existing  dat.abase  systems,  such  as  Query  By 
Example  [14],  System  R  [10],  Ingres  [13],  DB2  [19].  In  such  a  context,  the  problem  of  update 
of  views  which  are  implemented  on  an  underlying  database,  has  been  studied  with  dilferent 
approaches  [1-3,  5-9,  11,  12,  18,  22,  23].  Updates  on  views  must  be  translated  into  updates  on 
the  tinderlying  database.  In  g(;neral,  there  exists  more  than  one  database  update  that  may 
correspond  to  the  same  view  update.  The  problem  is  how  to  choose  a  view  update,  avoiding 
that  the  corresponding  underlying  database  update  may  create  inconsistencies  or  have  side 
effects  on  the  view.  Starting  with  the  work  of  Paolini  and  Pelagatti  [5],  it  was  acknowledged 
that  a  careful  analysis  of  views  and  databases  also  needs  to  account  f(<r  operiitions  on  views 
and  databases,  and  not  just  for  states,  ;is  it  was  traditionally  done.  A  database  can  be 
described  by  the  set  of  its  possible  legal  states  and  by  its  operations.  We  model  databases 
as  algebras  that  wo  call  data  abstractions,  that  is  a  set  of  values  and  a  set  of  operations 
to  manipulate  them.  A  view  is  a  particular  way  of  looking  at  a  database  and  it  can  iilso  bo 
described  by  its  states  (which  ar(>,  in  general,  different  from  the  d<atabasc  states)  and  by  its 
operations  (which  arc  in  gc'iieral  different  from  the  database  operations). 

In  this  paper,  cOS  in  [7],  both  databases  ami  views  are  defined  as  data  abstractions.  We 
<listinguish  between  the  notions  of  static  and  dynamic  view.  A  static  vi(;w  of  a  database; 
consists  of  a  data  abstraction  and  a  niapj)ing  which  establislu's  the  coiTespondence  between 
the  database  states  and  the  view  states.  A  dynamic  view  consists  of  a  static  view  and  an 
update  policy  which  states  how  to  translate  view  updates  into  database  updates.  In  the 
paper,  when  we  will  use  the  genenU  t(!rm  “view”,  we  mean  “dynamic  view”.*  Our  resemch 
uses  an  algebraic  approach  in  order  to  classify  dilferent  i)roperl.ies  of  vi('ws  with  respect  to 
the  treatment  of  updates.  In  onr  chi.ssirication,  special  attention  is  given  to  a  cl;uss  of  views, 
that  we  call  consistent.  Informally  speaking,  a  consistent  view  is  a  view  with  the  following 
pro])erty:  if  the  ('fleet  of  a  vi(!W  u])date  on  a  view  state  is  determined,  tlnm  the  corresponding 
database  update  is  unambiguously  dc'b'rmim'd.  Thus,  in  ord(;r  to  know,  how  to  translate 
a  given  view-uixlate  program  into  a  database  uixlate  {)rogram,  it  is  not  necessary  to  know 


*  Some  authors  use  the  term  “view”  to  designate  static  views  [1], 
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the  seqvieuce  of  the  single  operations  of  the  view  update  program,  but  it  is  sufficient  to  be 
aware  of  a  functional  specification  of  such  a  program.* 

Bancilhon  and  Spyratos  [1]  propose  an  elegant  solution  to  the  view-update  problem.  They 
show  that  the  choice  of  the  database  update  policy  can  be  made  by  deciding  which  por¬ 
tion  of  the  database  should  remain  invariant;  this  invariant  portion  is  called  the  constant 
complement. 

In  our  paper  wc  show  that  the  class  of  views  treated  by  Bancilhon  and  Spyratos  is  a  subclass 
of  the  consistent  views.  We  show,  however,  that  there  are  views  of  highly  ai>plicative  impor- 
tanc(?  which  cire  consistent,  but  cannot  be  modeled  by  the  approach  of  [1].  Consequently,  we 
have  extended  the  theory  of  Bancilhon  and  Spyratos  to  capture  the  update  semantics  of  the 
much  larger  class  of  consistent  views.  Our  appro.ach  uses  a  notion  of  complement  as  defined 
in  [l].  However,  we  do  not  require  that  the  information  contained  in  the  complement  remain 
invariant,  but  wc  permit  that  updates  may  cau.se  the  loss  of  parts  of  this  information. 

The  paper  is  organized  as  follows. 

In  s<'rtion  2,  we  introduce  our  notation  ami  define  the  bfvsic  concepts  that  will  be  used 
throughout  the  rest  of  the  paper.  Datab.isc  and  views  ;irc  defined  as  data  abstractions 
(algebra.s).  In  particular,  among  dilferent  other  types  of  vic'ws,  wo  introduce  the  notion  of 
consistent  vii'W  by  using  a  purely  algebraic  definition.  We  also  state  a  tlieoreni  which  shows 
tin?  relationship  between  the  different  types  of  views. 

In  section  3,  a  comprehensive  oxanq)lc  of  a  database  with  a  number  of  views  of  different 
type  is  given.  The  example  is  discussed  in  detail  since  it  will  be  ust!d  throughout  the  paper. 

In  s('ctiou  4,  we  introduce  the  ccnicept  of  cuiiditioiial  update.  Informally,  a  conditiojial 
view  update  is  executed  depending  on  the  result  of  the  evaluatit)n  of  a  predicate  on  a  view 
state.  Conditional  update  enables  us  to  define  coni{)lex  and  realistic  view  update  programs. 

In  s<;ctiou  5,  wc  explain  in  more  d(!tail  the  importance  of  consistent  views;  we  show  the 
*  Our  definition  of  “consistency”  does  not  coincide  with  the  one  given  in  [1]. 
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main  properties  of  these  views  and  give  some  examples  of  views  which  are  not  consistent. 
In  particular,  we  define  the  concept  of  functional  equivalence  of  update  programs  and 
show  that  for  a  consistent  view,  a  pair  of  functionally  equivalent  view  update  programs  are 
translated  into  a  pair  of  functionally  equivalent  database  update  programs.  Moreover,  we 
analyze  the  properties  of  consistent  views  with  respect  to  the  concurrent  execution  of  view 
transactions. 

In  section  G,  we  define  the  view  update  problem,  with  particular  reference  to  the  work  of 
Bancilhou  <uid  Spyratos.  We  define  the  notion  of  complement,  recall  and  reinterpret  the 
results  of  Baucilhon  and  Spyratos  and  explain  the  limitation  of  their  approach  in  modelling 
the  update  senumtics  of  some  views  of  the  example  given  in  section  3. 

In  section  7,  the  extension  of  the  theory  of  Baucilhon  and  Spyratos  to  the  class  of  all 
consistent  views  is  carried  out. 

After  giving  a  survey  of  related  work  in  section  8,  we  conclude  our  paper  with  an  overview 
an<l  som<;  comments  on  our  results  and  we  state  our  plans  for  future  research. 


2.  NOTATION  AND  BASIC  CONCEPTS 


In  this  section  wo  introduce  our  notation  and  state  the  basic  definitions  that  will  be;  used 
throughout  the  paper.  In  particular  we  will  use  the  terminology  and  reintroduce  a  number 
of  definitions  of  [7],  where  both  database  and  views  lire,  defined  as  data  abstractions,  i.e. 
algebras. 

A  data  abstraction  is  d(’fincd  by  a  pair  D  =  (D,Ed))  where  D  is  the  set  of  the  possible 
legal  states  of  the  abstraction  and  Ed  is  the  s<'t  of  operations  of  the  abstraction. 

In  our  geiH'ral  model  [7],  the  set  of  operations  Ed  is  composed  of  cpn'ry  op(;rations  Id  und 
update  operations  Ud  '•  ^d  (foAlD)-  In  tins  pai)cr  we  are  interested  only  in  update 
operations,  thus,  for  simplicity,  we  will  di.sregard  the  query  opcTations  Id  und  assume 
Sd  =  II D-  Our  simplified  model  of  a  data  abstraction  therefore  consists  of  a  pair  D  = 
(D,Ud),  where  D  is  the  set  of  h'g<d  states  and  Ud  is  a  set  of  update  operations.  Each 
update  operation  is  a  function  from  D  in  D. 

Given  a  set  Ud  of  iipdate  opei-ations  on  D,  it  is  e«usy  to  define  the  corresponding  S(d,  of 
update  expressions.  The  set  Ed  of  update  expressions  is  tin'  colh'ction  of  all  possible 
compositions  of  update'  operations: 


Vu  G  Ud*  n  S  Ed 


Vti,  V  G  Ed,  u  •  V  G  Ed 
no  otlu'r  {'Icments  are  in  Ed 

Tlirouglioid.  tlie  paper  we  assume  that  for  t'ach  data  abstraction  1),  Uj)  conlains  only  total 
operations.  A  gc'in'ralization  of  most  of  our  reseilts  to  partial  operations  is  straightforward. 
The  outline  of  such  a  ge'ueralization  can  be  found  in  [7]. 

Some'  of  tlie  prop('rties  of  data  abstractums  defined  in  [7]  that  will  be  used  in  this  pap(;r  are 
now  described. 
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DEFINITION  2.1.  Given  two  data  abstractions  A  cind  B,  A  statically  includes  B 
through  a  denoted  by  A[q:]  =>  B  iff  there  exists  a  surjtxtive  function  a  from  A  to  B  wliich 
is  called  abstraction  function. 

The  static  inclusion  is  a  necessary  condition  for  having  a  data  abstraction  A  as  a  possible 
representation  for  another  data  abstraction  B.  When  A[a]  =>►  B,  the  i)air  (o.B)  is  called  a 
static  view  of  A. 

Regarding  the  sets  of  operations  of  two  data  abstractions,  the  basic  notion  is  that  of  a 
translation  function. 

DEFINITION  2.2.  A  translation  function  r  from  B  to  A  is  a  function  that  maps 
operations  of  B  into  expressions  of  A; 

T  ;  Uq  — >  Ea- 

The  translation  function  r  is  extended  to  the  domain  Eq  as  follows: 

Vul,  u2  €  Eo  :  t{u1  •  u2)  =  nil  •  ru2. 

Since  r  is  a  function  which  maps  operations  to  operations  (also  calli'd  “functiouar ) ,  we 
adopt  the  usual  mathematical  notation  and  write  ru  instead  of  t(u).  wluMievi'r  parenthesis 
are  not  needed  to  delimit  the  argument  of  r. 

The  abstraction  function  a  ;md  the  translation  function  r  are  the  biisic  notions  to  deline 
the  concept  of  implementation  of  a  data  abstraction. 

DEFINITION  2.3.  An  abstraction  A  implements  an  abstraction  B  tlirough  a  and  r, 
denoted  by  A[a,  r]  =>•  B  if  and  only  if  a  is  surjective  and 

Vu  €  Ud  Vb  e  B  Va  6  A  :  b  =  tt(a)  u(b)  =  Q;(ru(a)). 

That  is:  a  is  a  homomorphism  with  respect  to  r. 

When  A[tt,  r]  =>■  B,  the  triple  V  =  (a,  r,  B)  is  c.allcd  a  (dynamic)  view  of  A,  and  A  is  said 
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to  be  the  base.  The  elements  of  A  are  said  to  be  base  states;  the  elements  of  B,  are  called 
view  states.  The  incumbers  of  Ua  called  base  operations;  the  elements  of  Ub  are 
called  view  operations. 

DEFINITION  2.4.  Let  D  =  (D,Sd)  denote  a  databa.se.  For  static  views  D[o:]  A,  we 
can  dcjfiiie  an  equivalence;  relation  ==  as  follows: 

Vdl,  d2  G  D  :  dl  d2  tt(dl)  =  Q(d2) 

that  is,  ■-=  groups  together  the  states  of  D  which  correspond  by  a  to  the  same  state  of  B. 
For  any  data  abstraction  A,  we  can  define  two  graphs; 

DEFINITION  2.5.  The  natural  transition  graph  Ta  connects  states  of  A  as  follows: 

TA(al,a2)  (3u  €  Ua  :  ii(al)  =  a2) 

that  is,  al  is  connected  to  a2  iff  there  exists  an  update  operation  of  A,  which  maps  the  first 
state  into  the  second.  TA(al,a2)  in  the  rest  of  the  papc'r  will  be  denoted  as  ai  — *■  a2. 

DEFINITION  2.G.  The  natural  connection  graph  Ca  <>f  A  is  the  transitive  closure 
of  Ta  The  following  is  imim'diately  to  see: 

CD(ai,a2)  ^  {3u  G  Ea  :  "(al)  =  a2) 

that  is,  al  is  connected  to  a2  if  there  exists  an  update*  expression  of  D,  which  maps  the 
first  state  into  the  .second.  CA(al,a2)  in  the  rest  of  the  paper  will  lx;  (h;notcd  as  al  -*— »  a2. 
We  will  us('  the  notation  al  -—*=>  i\2  to  exi)res.s  tlx*  di.sjimction  :  (al  -♦— >  a2  V  al  =  a2). 

The  dc'linition  of  the  two  graphs  are  useful  in  order  to  charact('rize  sonx;  i)roperti(;s  of  data 
abstractions. 

DEFINITION  2.7.  An  abstraction  A  is  cyclic  iff 

Val,  a2  G  A  :  (al  — a2  ^  a2  -*— >  al) 
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that  is,  if  state  al  can  be  updated  to  a2  then  there  also  exists  an  inverse  update  expression 
which  transforms  a2  to  ai. 

Each  of  the  above  defined  graphs  To  and  Cd  refers  to  a  single  data  abstraction. 

When  cin  abstraction  D  (base)  is  used  to  implement  an  abstraction  A  (view),  two  other 
graphs  are  defined,  which  are  useful  to  represent  the  effects  of  the  translation  of  the  opera¬ 
tions  of  A  into  operations  of  D. 

DEFINITION  2.8.  Let  D  be  a  data  abstraction  and  let  V  =  (o,r,  A)  be  a  view  of  D. 
The  Transition  Graph  induced  by  V  on  D,  Tdv-  defined  as  follows: 

TDv(dl,  d2)  3u  e  Ua  :  ru(dl)  =  d2 

that  is,  two  states  of  the  base  D  are  connected  by  TdV)  jff  there  exists  an  update  operation 
of  the  view  V,  the  translation  of  which  maps  tin*  first  base  state  into  the  second.  In  the  rest 
of  the  paper,  Tdv(<1I,  (12)  will  be  denoted  by  dl  -v-+  d2. 

DEFINITION  2.9.  Let  D  be  ;us  in  the  above  definition.  The  Connection  Graph 
induced  by  V  on  D,  CdVi  is  defined  as  follows: 

Cdv (dl?  (12)  ^  3u  €:  Ea  :  Tu(dl)  =  d2 

that  is,  two  states  of  the  bjr.se  D  jih’  connected  by  Cdv  Hf  flK-fc  exists  Jin  u])dat.c  expression 
of  the  view,  the  tnuislation  of  which  nuips  the  first  bjis<*  stJite  into  the  sc'cond.  In  the  rest  of 
the  paper,  Cdv  ((11,(12)  will  be  denoted  by  (11  -*v-^  d2.  Whenever  we  want  to  express  the 
disjunction  (dl  -*v->  (12  V  di  =  (12)  we  will  write  dl  =*v=>  (12. 

A  vi('w  V  =  (a,r,A)  implenu'nted  on  a  ba.se  D  may  have  sonie  int('resling  i>rop('rties  with 
regard  to  its  base.  We  will  now  define  some  of  these  properties  using  the  transition  and 
connection  gniphs  induced  by  V  on  D. 


DEFINITION  2.10.  The  vi('w  V  preserves  connections  iff 

Vdl,  (12,  d2'  e  D  :  ((12  ==  d2'  A  (dl  -*v-+  (12  A  dl  -*v-^  d2'))  =>  (12  =  d2'. 
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That  is,  from  a  given  state  of  the  base,  it  is  not  possible  to  reach  in  the  connection  graph 
mducccl  by  V  on  D  two  (liffercnt  states  which  represent  the  same  state  for  the  view. 

DEFINITION  2.11.  The  view  V  preserves  loops  iff 

Vdl,  d2  €  D  :  (di  ==  d2  A  dl  -+v-»  d2)  =>  dl  =  d2. 

This  means;  if  an  update  expression  leaves  unchang('d  the  state  of  the  view  (looi)),  then  its 
translation  loaves  unchanged  the  base’s  state. 

Note  that  the  properties  of  preserving  connections  and  of  preserving  loo])s  do  not  imply  one 
anotluT.  In  figure  2.1  we  show  a  datab«isc  (with  only  three  stal.('s)  and  a  view  (with  two 
states)  which  preserves  loojjs  hut  not  cojinections.  Figure  2.2  shows  a  datab;ise  with  a  view 
preserving  connections  but  not  loops. 

DEFINITION  2.12.  The  view  V  is  consistent  iff  V  preserves  connections  and  preserves 
loops. 

LEMMA  2.1.  V  is  consistent  iff 

Vdl,  d2,  d2'  e  D  :  (d2  ==  d2'  A  dl  =*v=>  d2  A  dl  =*v=>  d2')  d2  =  d2'. 


PROOF.  The  easy  proof  of  this  lemma  is  omitted. 

As  we  already  stated  in  the  intnxhiction,  the  cla.ss  of  consistent  views  is  of  highly  theoretic 
and  ai)i)licative  importance.  Section  5  is  dedicated  to  explain  and  i)rove  the  prijperties  of 
con.sistent  vii'ws.  Let  us,  how(wer,  anticipate  that  if  a  vii!w  V  —  («,  r.  A),  delined  on  a 
database  D,  is  consistent  then  the  following  property  holds: 

^2  &  Ea,  Va  €  A,  Vd  G  D  : 

((«(d)  =  a  A  6(a)  =  60‘)) 

Informally,  this  j)roi)erty  cmi  be  interpreted  as  follows;  If  we  are  able  to  give  a  functioucal 
specification  of  a  complex  view  update,  say  by  a  function  F  which  maps  each  view  state 
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a  e  A  into  an  updated  state  F(a)  G  A,  then  all  possible  view  update  expressions 
which  implement  precisely  the  function  F  have  equivalent  translations  under  r .  A  functional 
specification  of  a  view  update  is  therefore  sufficient  to  define  the  translation  of  the  update. 
It  is  therefore  not  necessary  to  inspect  the  particular  sequence  of  operations  of  tlie  view 
update  program. 

ClccU’ly,  consistency  is  a  very  desirable  property  which  makes  a  view  much  more  accessible 
for  theoretic  analysis  and  more  tractable  for  practical  management. 

The  above  quoted  property  will  be  proved  in  a  more  general  form  in  section  5  not  only  for 
view  update  expressions,  but  for  the  more  powerful  class  of  “view  update  programs”.  Let 
us  now  proceed  by  defining  another  important  property  of  views. 

DEFINITION  2.13.  A  view  V  partitions  the  base  D  iff  it  is  possible  to  decompose  D 
into  a  family  of  nonempty  si'ts  Dl, . . . ,  Dk,  with  i  ^  j  =r»  Di  n  Dj  =  0  and  D1  U  D2  U  . . .  U 
Dk  =  D,  such  that  the  following  properties  a)  and  b)  hold: 

a)  (i  /  j  A  di  G  Di  A  dj  G  Dj)  =»  -'(di  =*v=>  dj) 

b)  VI  <  i  <  k  :  (dl,d2  G  Di  A  dl  ^  d2)  =>  «{dl)  ^  o!(d2). 

LEMMA  2.2.  If  a  view  jiartitions  the  b;isc  then  it  is  consistent. 

PROOF.  Assume  the  view  V  =  (a,  r,  A)  partitions  the  b;use  D  but  is  not  consistent. 
Then,  by  Lemma  2.1,  there  exist  di,  <12,  d2'  G  D,  such  that  dl  —=  <12  A  dl  =*v=> 
(12  A  dl  =*v=^  (12^  A  (12  /  (12^  From  D('liiii(i(>n  2. 13. a  it  follows  tliat  dl,  <12  and  <12'  are 
all  m  the  same  component,  s;iy  Di.  But  this  is  in  contradiction  to  Definition  2.13.b,  since 
there  it  is  required  a(dl)  7^  rt(d2). 


Q.E.D. 
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LEMMA  2.3.  If  a  view  is  cyclic  and  preserves  loops  then  it  partitions  the  base.* 

PROOF.  Assume  that  V  =  (o:,r,A)  is  a  cychc  and  loop  preserving  view  of  the  base  D. 
It  is  easy  to  see  that  the  relation  =*v^  then  becomes  an  equivalence  relation  on  D.  Let 
D1,D2, . . .  ,Dk  denote  the  equivalence  classes  with  respect  to  =*v=>  ,  i.e. "the  elements  of 
the  quotient  algebra  D/  -*v=>  .  We  will  show,  that  Dl, . . .  ,Dk  form  precisely  a  partition 
into  subsets  of  D  as  required  by  definition  2.13.  Property  a)  of  definition  2.13  holds  trivially 
by  the  definition  of  Dl, . . . ,  Dk.  Assume  that  property  b)  does  not  hold.  Then  there  exists  a 
Di  ;md  dl,  d2  G  Di  such  that  dl  ^  d2  and  a{Jl)  =  a(d2).  From  dl  =*v=^  d2  it  then  follows 
that  there  exists  an  update  expression  u  €  Ea,  such  that  u(a(dl))  =  a:(dl)  and  ru(dl)  =  d2. 
But  then,  since  V  preserves  loops,  it  must  hold  dl  =  d2,  which  is  a  contradiction. 

Q.E.D. 

Note  that  a  view,  which  partitions  the  base  is  not  necessarily  cyclic  (examples  are  given  in 
the  next  section).  Therefore  we  will  also  consider  the  class  of  views  which  arc  both  cyclic 
and  p.irtition  the  base  (this  class  is  a  proper  subclass  of  the  class  of  views  which  partition 
th(!  base). 

In  figure  2.3  we  give  an  overview  of  the  inclusion  relationship  between  the  different  chisses 
of  views  d('finod  in  this  section. 

Wo  can  summarize  our  re.sults  about  the  chissifications  of  views  in  the  following  theorem: 


THEOREM  2.1. 

a)  If  V  partitiojis  the  bjxse  then  V  is  coasistimt  (Lemma  2.2). 

b)  If  V  is  consistent  then  V  preserves  loops  (Dcf.  2.12). 


*  In  [7],  a  j)ropcrty  “V  slices  the  ba.sc”  h;is  been  defined,  which  is  more  general  than  the 
property  “V  partitions  the  base”.  In  the  present  paper,  the  slicing  property  will  not  be 


used. 
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c)  If  V  is  consistent,  then  V  preserves  connections  (Dcf,  2.12). 

d)  If  V  is  cyclic  and  preserves  loops  then  V  partitions  the  base  (Lemma  2.3). 

A  pictorial  representation  of  this  theorem  is  given  in  figure  2.4.  This  figure  also  helps  to 
find  all  transitive  consequences  of  the  asssrtions  stated  in  Theorem  2.1,  such  as  for  example. 
If  V  is  cyclic  and  preserve  loops  then  V  preserves  connections. 


FIGURE  2.4. 


3.  A  COMPREHENSIVE  EXAMPLE 


Tliis  section  is  entirely  dedicated  to  the  presentation  of  a  comprehensive  example  of  a 
database  on  which  different  views  are  defined.  In  the  next  sections  we  will  use  this  example 
to  emphasize  some  problems  <md  to  illustrate  our  results. 

In  the  following,  we  assume  that  the  reader  is  familiar  with  the  elementary  concepts  of  the 
relational  data  model  [17],  [24].  In  particular,  we  us<'  the  following  notation:  Let  R  be  a 
relation,  t  G  R  a  tuple  of  R  and  A  an  attribute  of  R,  then  t.A  denotes  the  value  of  the  tuple 
t  for  tlu'  attribute  A.  The  projection  of  the  relation  R  to  attribute  A  is  di-noted  by  R[A|.  A 
tuple'  of  a  relation  is  exi)licitly  referenced  by  enclosing  its  attribute  values  in  migle  brackets, 
e.g.  (i,  j,  k). 

Consider  a  relational  database  STORE,  which  maintains  information  ab(»ut  the  type,  name 
and  price  of  different  products  that  arc  for  sale  in  a  store  and  about  the  single  pic'ces  of  each 
prodiu  t  which  are  available  in  the  warehouse. 

The  database  STORE  consists  of  two  relations  BILL  and  PIECES  with  the  following 
schemas: 

BILL  :  (PRODUCT#,  NAME,  PRICE) 

PIECES  :  (PRODUCT#,  PIECE#,  BROKEN) 

The  single  at  tributes  have  the  following  incauiiig: 

PRODUCT#  :  an  integer  from  1  to  iOO  identifying  a  product-type. 

NAME  :  the  name  of  a  protluct. 

PRICE  :  the  selling  price  for  one  piece  of  a  product. 

PIECE#  :  a  number  identifying  each  single  piece  available  in  the  magazme. 

BROKEN  :  a  boolean  v<-Uue  indicating  whctlier  the  piece  is  broken  or  not. 

We  assume  furthermore  that  the  database  is  subject  to  the  following  integrity  constraints: 
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a)  (PRODUCT#,  PIECE#)  is  a  key  for  the  relation  PIECES. 

b)  PRODUCT#  is  a  key  for  the  relation  BILL. 

c)  Vt  G  BILL(1  <  t.PRODUCT#  <  100)  A  VI  <  i  <  100  3t  G  BILL  (t.PRODUCT# 
=  i).  This  means,  that  BILL  always  contains  100  rows,  one  for  each  product-type. 

d)  Vt  e  PIECES  3t'  e  BILL(t.PRODUCT#  =  t'.PRODUCT#).  This  means,  that  for 
each  ])iece,  the  corresponding  product  is  described  in  the  relation  BILL.  Note'  that  the 
converse  is  not  necessarily  true;  For  some  product  description  in  BILL,  there  might 
exist  no  piece;  in  PIECES. 

STOP.E  is  the  sc't  of  all  legal  states  of  the'  database.  A  database  state  d  G  STORE  consists 
of  a  pair  (b,  p),  where  b  and  p  are  legal  instance's  (with  respect  to  the  abeive  inte'grity 
cemstraints)  of  DILL  <mel  PIECES.  Furthe'rmeirc,  let  PIECES  denote'  the  set  of  all  legal 
states  of  the  relation  PIECES: 

PIECES  =  {b  I  (b,p)  G  STORE}  ; 

and  let  DILL  elenote  the  set  of  all  Icgeil  state's  of  the;  relation  BILL  : 

BILL  =  {p  I  (b,p)  G  STORE). 

We'  assume'  that  all  conipul  able  elatabase'  ope'ratieuis,  sue-h  as  insertion,  de’le'tiein  anel  upelating 
of  tuples,  eus  well  as  ceuielitieuial  coinbiuatieuis  the're'eif  are'  alloweel  U{)el;ite;  eipe'rations  on  emr 
elatabixse.  Let  U  elenote  the;  .'eet  of  all  tlu'se  eipe'rations,  then  our  elatabase*  is  given  by  the 
eiata  abstractiein  STORE  =  (STORE,  H).  Note, that  .since  D  is  ele'fmed  as  the  complete;  set 

e)f  all  possible  operations,  the  natural  transition  grajih  Tstoiie  connects  e'very  pair  of  states 
e)f  the  base  set  STORE  in  botli  dire'ctions  (this  heilels  .Use)  for  the  natural  cemne'ction  graiih 
CsTORE,  wliich,  in  this  c;i.se',  is  equal  te)  Tstorb)- 

Let  us  now  describe  six  views  VI, . . . ,  VG  of  tliis  elataba.se.  As  defined  in  the  previous  section, 
each  view  consists  of  a  triple  (cv,  t,A),  where  a  is  the  abstraction  function 


tt  :  STORE  ^  A, 

which  (issociate's  to  e*acli  le'gal  state;  of  the;  STOR.E  elatabase;  a  state*  e)f  the*  vit'W,  A  is  a  eiata 
abstraction  (A,Ua),  wlmre  A  is  the  set  of  view  states  and  Ua  is  the  set  e)f  update;  ope'ratieuis 
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defined  on  A;  r  is  the  translation  of  each  view  update  operation  into  an  update  expression 
of  the  database  STORE. 

VIEW  1;  The  Acquisition  view  VI  =  (Ai,Ui)) 

description:  This  view  ‘‘.sees’'  at  each  moment  the  present  state  of  the  relation  PIECES. 
The  store  can  acquire  new  pieces  of  each  product,  by  issuing  the  operation  DUY[x,  y,  z], 
where  x  designates  the  product  number  identifying  the  product  type,  y  the  piece?  number 
of  the  new  piece  and  /,  indicates  whether  the  new  piece  is  broken  or  not  (the  view  thus  also 
consents  to  acquire  broken  pieces).  Formally,  for  each  different  triple  (x,  y,  /.),  BUYfx,  y,  /.] 
is  a  dilfereut  view  update  operation. 

Abstraction  function  cii  and  view  state  set  Ai: 

Let  d  =  (b,p)  €  STORE;  ai(d)  =  fii(b,p)  =  p. 

Ai  =  PIECES 

Set  of  update  operations  Ui: 

III  =  {BUY[x,  y,  z]  I  x,y  G  INTEGER  A  1  <  x  <  100  A  (z  =  true  V  z  =  fal.se)}, 
such  that  for  all  relational  instances  p  G  PIECES: 

BUY[x,  y,  z]{p)  =  if  (x,y)  G  p[PRODUCT#,  PIECES#)  then  p  ehc  pU  {(x,y,z)}. 

Note-.  INTEGER  denotes  a  finite  range  of  positive  integers. 

Translation  function  Ti: 

Let  d  -  (b,p)  G  STORE. 

riBUY[x,  y,  z](b,  p)  =  (b,  BUY[x,  y,  z](p)). 

Thus  the  translation  leaves  the  BILL  relation  invariant. 

VIEW  2:  The  Repair  Service  V2  =  (A2,n2)) 

description:  This  view  serves  to  alter  the  information  about  the  state  of  each  piece  av.iil- 
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abl<!  in  the  magazine.  A  piece  is  broken  or  intact  according  to  the  boolean  value  of  its 
attribute  “BROKEN” .  Only  the  PIECES  relation  is  visible  to  the  view  V2  (this  is  just  as 
for  VI).  There  are  two  types  of  opcr;itious  :  BREAK[x,  y]  is  issued  when  piece  number  y 
of  product  type  x  breaks  during  the  storing  phase.  REPAIR[x,  yj  is  issued,  if  piece  y  of 
product  X  was  broken  and  has  been  repaired. 

Abstraction  function  and  view  state  set  A2: 

0!2  =  0^1)  -^2  —  Ai  =  PIECES. 


Set  of  update  operations  U2: 

TJo  =  {BREAK[x,  y],  REPAIR[x,  y)  |  x,  y  €  INTEGER  A  1  <  x  <  100}, 

such  that  for  all  relational  instances  p  G  PIECES; 

BREAK[x,  y](p)  =  if  (x,  y,  false)  €  p  then  (p  -  {(x, y, false)))  U  {(x,y,true)} 

else  p. 

REPAIR[x,  yl(p)  1/  (x,  y,  true)  €  p  then  (p  -  {(x, y, true)})  U  {(x,y, false)} 
else  p. 

Translation  function  t^: 

Let  (1  =  (b,  ]))  G  STORE. 

roBREAKlx,  y](b,  p)  ^  (b,  BREAK[x,  y](p)). 
r2REPAIR[x,  y](b,  j))  =  (b,  REPAIR[x,  yj(p)). 

Thus,  as  for  view  VI,  the  translation  leaves  the  BILL  relation  invariant. 

VIEW  3:  The  Inventory  V3  =  (03,  r,,  (A3, U3)) 

description:  This  view  is  delined  exactly  in  the  same  way  as  View  2,  with  the  only 
dilfereuce  that  the  REPAIR  operation  does  not  exist,  thus  a  transition  between  two  states 
due  to  the  BREAK  operation  is  irreversible  in  view  V3. 

Abstraction  function  03  and  view  state  set  A3: 


«3  =  OC2'>  -^3  —  ^2  —  PIECES. 
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Set  of  update  operations  U3: 

U3  =  (BREAK[x,  y]  |  x,y  e  INTEGER  A  1  <  x  <  100},  where  BREAK[x,  y]  is  defined  as 
for  view  V2. 

Translation  function  r^: 

Let  d  =  (b,p)  €  STORE. 

r3BREAK[x,  y](b,  p)  =  (b,  BREAK[x,  y](p)), 

VIEW  4;  The  vendor’s  view  V4  =  («4, 74,  ( A4,  U4)) 

description:  This  view  desc-ril)cs  the  iiifonnation  visible  to  a  vendor.  We  assume  that  a 
vendor  has  to  know  tlie  description  and  price  of  each  product  (i.c.thc  complete  information 
contained  in  the'  relation  BILL),  as  well  as  the  number  of  intact  pieces  available  for  each 
product.  The  latter  is  an  aggregate  of  information  contained  in  tlic  relation  PIECES.  We 
assume,  however,  that  the  vendor  is  not  concerned  with  piece  numbers  or  with  broken  pieces. 
All  tills  information  is  hidden  to  the  vendor.  The  vendor  therefore  se<>s  tlu'  BILL  relation, 
extciuh'd  by  a  field  QTY.  AVAILABLE  wln<-h  for  each  product  reports  the  number  of  not 
broken  pieces  available. 

In  order  to  sell  one  piece  of  product  i,  tlu-  vendor  issues  the  view  ojx'rat.ion  SELL[i].  The 
nuiulxT  of  available  jiieces  (i.e.  the  value  of  the  field  QTY_  AVAILABLE)  then  is  decre- 
inentod  by  1.  If  there  arc  no  available  pieces  for  a  sjx'cific  product  i  (i.e.  QTY_  AVAIL¬ 
ABLE  =  0  in  row  i),  then  the  operation  SELL[i]  liiis  no  effect. 

Tlu're  are  many  dilferent  possibilities  to  translate  the  vi('W  u[xlate  operation  SELL[i]  into  a 
datab.use  update,  since  in  general,  for  iiroduct  i  there  will  exist  many  available  pieces,  one 
of  which  should  be  eliminatc'd  from  the  database.  For  view  V4  we  have  chosen  the  following 
update  policy:  from  all  intact  pieces,  eliminate  the  one  with  the  lowest  piece  number. 
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This  choice  may  be  motivated  as  follows;  Assume  that  pieces  of  each  product  are  acquired 
by  ascciidiii;'  piece  numbers,*  then,  at  each  time  a  })roduct  is  sold,  the  piece  with  the  longest 
storing  duration  of  this  product  is  taken  from  the  warehouse.  This  FIFO  policy  is  very  useful 
in  practice,  especially  when  a  single  piece’s  value  decrements  as  storage  time  increases. 

Abstraction  function  04  and  view  state  set  A4; 

Let  d  =  (b,  p)  be  a  database  state.  tt4(d)  =  U4(b,p)  =  s,  where  s  is  an  instance  of  the 
schema 

S  :  (PRODUCT#.  NAME,  PRICE,  QTY_ AVAILABLE) 

such  that  PRODUCT#  is  a  key  of  s,  s[PRODUCT#,  NAME,  PRICE]  =  b  ciud  Vt  e  s: 
t.QTY  AVAILABLE  =  card({x  |  x  e  p  A  x.PRODUCT#  =  t.PRODUCT#  A  x.BROKEN 
=  false}). 

A4  =  {s  1  3d  e  STORE  ;  s  =  04(d)}. 

Set  of  update  operations  U4; 

U4  =  {SELL[i|  I  i  e  INTEGER  A  1  <  i  <  100},  where  SELL[i]  is  defined  as  follows: 

Let  s  G  A4  and  lot  t;  G  s  denote  tli<’  uni(]uc  tuple  of  s  with  tj. PRODUCT#  =  i,  then 

SELL[i](s)  =  if  t;.gTY  AVAILABLE  >  0  then 

(s  _  {ti})  u  {(i,t;.NAME,ti.PRICE,ti.QTY ..AVAILABLE  -  1)} 

else  s. 

Translation  function  T4: 

Let  d  =  (b,p)  G  STORE;  Deliiie  for  each  i  a  .set  Min[i|(j))  by: 

Min[i](p)  =  {t  G  p  I  t.PRODUCT#  =  i  A  t.BROKEN  =  false  A  t. PIECE#  minimum}. 


•  This  means  tliat  for  two  elements  of  the  same  product  typo,  the  oue  with  higher  jiiece 
number  has  been  accpiired  after  the  one  with  the  lower  piece  number. 


t 
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Note  that  Min[i](p)  is  either  a  singleton  or  the  empty  set. 

We  define  the  translation  function  by: 

r4SELL[i]{b,  p)  =  (b,  p-Min[il(p)). 


VIEW  5;  The  alternative  vendor’s  view  V5  —  (AsjUs)) 

descrir.tion:  This  view  is  equal'  to  view  V4  with  the  only  difference  that  another  update 
policy  (translation  function  r,)  is  used:  When  the  operation  SELL  is  issued,  instead  of 
<leleting  the  pie<-e  with  the  low<-st  piece  numlxT,  this  time,  the  piece  with  tlie  highest  piece 
mnnher  is  deleted  (i.e.  sold).  This  policy  corresponds  to  a  LIFO  strategy. 

Abstraction  function  and  view  state  set  A5: 

«5(d)  =  “4(d)  As  =  A4. 


Set  of  update  operations  U5: 


Us  =  U4. 


Translation  function 

Let  d  ^  (b,p)  e  STORE;  Define  for  each  i  a  st't  Max[il(p)  by: 

Max[i](p)  =  {t  €  p  1  t.PRODUCT#  =  i  A  t.BROKEN  =  false  A  t.RIECE#  =  maximum}. 

Note  that  Mcix[il(p)  is  either  a  singleton  or  tlie  empty  set. 

The  translation  function  rs  is  di'lincil  by: 

r5SELL[i](b,  p)  =  (b,  p  Max[i](p)). 


VIEW  6; 


The  Price  Setting  view  VG  =  Uq)) 


description:  Through  this  view, 
selling  price  of  each  single  product. 


the  store’s  imuiager  h;is  the 
Only  the  relation  BILL  is 


possibility  to  modify  the 
visible  to  the  user  of  VG. 
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For  each  product  x  and  for  each  (representable)  integer  y,  an  operation  SETPRICE[x,  y],  is 
defined,  which  sets  the  PRICE  component  of  the  record  describing  product  x  to  value  y. 

Abstraction  function  and  view  state  set  Ac: 

Let  d  =  (b,p)  €  STORE. 

ocld)  =  a!o(b,p)  =  b;  Ac  =  BILL. 

Set  of  update  operations  Ua: 

Uc  =  (SETPRICEfx,  y]  I  x,y  e  INTEGER  A  1  <  x  <  100}, 

where  SETPRICE[x,  y]  is  dehned  as  follows:  let  b  6  Ac,  and  let  t  denote  the  tuple  of  b 
with  t.PRODUCT#  =  x;  then 

SETPRICE[x,  y](b)  =  (b  -  {t})  U  {(x,  t.NAME, y)}. 

Translation  function  to: 

Let  d  =  (b,  p)  €  STORE. 

roSETPRICE(x,  y](b,  p)  =  (SETPRICE[x,  y](b),  p). 

Note  that  among  all  views  that  we  liave  deliiicMl,  VG  is  the  only  ouc'  which  allows  to  modify 
the  BILL  part  of  the  databiuse  STORE. 

Let  us  now  classify  the  different  views  of  tliis  example  according  to  the  jiroperties  defined 
in  the  previous  section. 

1.  VI  is  not  cyclic,  since  tln-re  exists  no  operation  (or  (>xpn'ssion)  which  could  act  as 
an  inverse  of  the  BUY  operations.  The  BUY  oiierations  irreversibly  add  tuples  to  the 
view.  The  view  Vi  partitions  the  base:  each  class  D;  corresponds  to  a  different 
state  bj  of  the  relation  BILL.  For  fixed  b;,  let 

Di  =  {(bi,p)|(bi,p)€STmiE}. 

For  this  partition,  it  is  easy  to  verify,  that  the  properties  required  by  definition  2.13 


hold. 
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2.  V2  is  cyclic  and  partitions  the  base.  The  classes  Di  of  the  partition  are  as  for  the 
view  VI. 

3.  V3  is  not  cyclic,  but  partitions  the  base.  Also  for  this  view,  the  classes  Di  arc 
the  same  as  for  the  view  VI. 

4.  V4  is  not  cyclic  and  docs  not  partition  the  base.  Nevertheless  V4  is  consistent. 

The  fact  that  V4  does  not  partition  the  base  can  be  shown  by  a  counterexample. 
Figure  3.1  shows  two  states  dl  =  (bl,  pi)  and  d2  =  {b2,  p2)  of  STORE,  as  well  as 
a  third  database  state  d.  It  clearly  holds  a4{dl)  =  a4(d2).  Consider  the  operation 
r^SELLil].  It  holds:-  r4SELL[l](dl)  =  r4SELL[ll(d2)  =  d.  Assume,  that  V4  be 
partitioned.  Since  dl  =f  d2,  these  tw'o  states  must  belong  to  two  different  classes  Di 
and  Dj  of  the  partition  (dl  6  Di  and  d2  6  Dj  with  i  j).  Since  r4SELL[ll(dl)  =  d,  it 
holds  dl  =*V4=i>  d,  therefore,  by  property  a)  of  definition  2.13,  it  must  hold:  d  €  Di. 
On  the  other  hand,  from  r4SELL(ll(d2)  =  d,  we  immediately  deduce  d2  =*V4=^  d, 
and  therefore,  d  G  Dj.  This  is  in  contradiction  to  the  disjointness  of  the  sets  Di  and 
Dj  (Def.  2.13).  Therefore  V4  is  not  partitioned. 

The  consistency  of  V4  will  be  proved  form.Uly  later  in  this  paper.  However,  let 
ns  explain  informally,  why  V4  is  consistent.  If  we  know  the  effect  of  a  view  update 
program  on  a  particular  view  state,  than  we  blow  how  many  pieces  of  each  product 
have  been  sold.  By  tlu'  particular  update  policy  V4  (translation  function  r4)  we  then 
also  know  exactly  which  pieces  of  each  product  have  been  sold:  namely  those  with 
the  lowest  PIECE#  (jirovided  they  are  not  broken).  Thus  any  functional  specification 
of  a  view  update  program  (expression)  unambiguously  determines  the  translation  of. 
this  program  into  a  dal, abase  uixlate  program.  As  we  have  alrc'ady  remarked,  this 
projierty  is  equivalent  to  consistency. 

5.  V5,  for  similar  reasons  as  V4  is  consistent,  but  does  not  partition  the  base  and 
is  not  cyclic. 


6.  VG  is  clearly  cyclic  and  partitions  the  base.  The  single  classes  of  the  partition  arc 
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correspond  to  different  instances  of  the  PIECES  relation  .  Every  different  instance  of 
this  relation  determines  a  different  class  Di. 

The  properties  of  the  views  VI, . . . ,  V6  are  summarized  in  figure  3.2. 
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FIGURE  3. 1 


FIGURE  3.2. 


4.  CONDITIONAL  VIEW  UPDATES 


Wo  have  shown  in  the  last  section  that  our  alg('l)raic  model  of  databases  and  views  can  be 
used  to  represent  quite  realistic  situations.  However,  it  is  not  difficult  to  see,  that  the  choice 
of  the  .set  Ua  of  update  operations  of  view  V  =  («,  r,  (A.  Ua))  is  critical  in  the  sense  that 
it  may  impose  a  serious  limit  on  the  represc'utability  of  view  update  programs  (also  view 
transactions). 

Considc-r  for  example*  the  view  V4  of  section  3.  Supj)osc  that  a  client  wants  to  buy  three 
I)i('c<'s  of  product  5,  but  if  there  arc  less  pieces  available,  the  client  prefers  not  to  make  the 
d(;al  and  to  look  for  anotluu  company.  It  is  clear  what  the  vendor  has  to  do,  in  order  to 
satisfy  such  a  “couditionar  recpiest.  He  first  must  in.si)('ct  the  present  state  s  of  his  view 
and  read  the  numlx'r  of  available  items  for  product  5.  If  the  number  is  not  less  than  3  he 
will  issue;  the  cxprc;ssion 

SELL(5l(SELL[5](SELL[5l(s))). 

If  the  number  of  available  it(;ms  is  less  than  3,  thou  the  vendor  leaves  the  vic'w  unchanged. 
The*  ovi-rall  transaction  can  be  calh'd  a  conditional  update.  We  are  not  able  to  rc'prcsc'iit 
a  conditional  updat.e  through  the  uixlato  operations  or  update  expressions  of  our  view  V4. 
Of  course,  we  could  add  a  set  of  nc'W  operations  to  U4,  .say  {SELL[n,m]}  which  perform 
c'xactly  the  t;isk  of  our  condit  ional  update,  namely  to  “sell”  n  pieces  of  product  ni,  only  if 
n  pieces  of  this  product  are  available.  However,  this  would  be  a  very  application  d(;ix'ndent 
modification  of  tlx*  opei’ation  set  U4. 

Rc'iiiember  that  for  (;ach  update  operation  set  U,  we  have  a  corresj)ouding  .s(;t  of  update 
expressions  E  (Sect  ion  2).  Wi*  prefer  to  extend  the  set  of  update  expressions  E  to  a  .set 
E  '  D  E,  such  that,  E  '  contains  all  possihh;  conditional  updaL(;s  that  cmi  be  built  from  tlu; 
“primitive”  update  expressions  of  E. 

A  necessary  concept  for  the  formalization  of  conditional  updat('s  is  the  notion  of  predicate. 
A  conditional  update  is  executed  depending  on  the  result  of  the  evaluation  of  a  predicate 
on  a  view  state.  If  A  =  (A,TIa)  iw  ^  ‘lid,a  abstraction,  then  Pa  denotes  the  s<'t  of  decidable 
predicates  over  A.  We  do  not  undertake  the  tedious  task  of  defining  formally  what  a 
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decidable  predicate  on  elements  of  A  is.  The  syntactical  form  of  such  predicates  would 
depend  heavily  on  the  formalism  chosen  for  n^presenting  or  manipulating  the  elements  of  A 
(for  example  the  relational  model).  Semantically  speaking,  Pa  consists  of  all  predicates  p 
that  allow  to  distinguish  a  particular  subset  S  C  A  among  others,  sxieh  that  for  all  elements 
s  €  S,  p(s)  is  true,  but  for  all  elements  s'  6  A  -  S,  p(s')  is  false.  The  number  of  semantically 
different  predicates  in  Pa  is  thus  essentially  2^^^  (we  suppose  that  A  is  a  finite  set).  Clearly, 
in  most  formalisms  the  same  predicate  can  be  syntactically  represented  in  many  (possibly 
infinite)  different  ways.  Rather  than  prescribing  a  specific  formalism,  we  leave  the;  syntax  of 
predicates  to  the  designer  of  a  particular  database  system.  When  we  use  predicates  without 
naming  a  i)articul;vr  state,  to  which  pn^licales  are  applied,  we  will  use  Church's  Lambda 
Notation  for  repr(;senting  the  predicate.  For  example  the  predicate  which  is  true  ifi  the  state 
to  which  it  is  applied  is  e<iual  to  state  “a”  can  bo  denoted  by 

Ax(x  =  a). 

In  this  expression,  x  is  a  placeholder  for  the  argument.  If  this  predicate  is  applied  to  a 
specific  state  c,  the  expr<!ssion  “Ax(x  =  a)  (c)”  is  e<iuiv<ilent  to  “c  =  a”. 

The  n(;xt  definition  introduces  more  forimUly  tin?  basic  concepts  needt'd  in  order  to  deal 
with  conditional  updates. 


DEFINITION  4.1,  Let  A  -  (A,Ua)  be  a  data  abstraction. 

a)  idA  demotes  the  identity  on  A,  PA<lonotcs  the  set  of  all  cv«iluabh'  predicates  on  A 

b)  Let  us  define  the  new  compound  operation  “if  (p,  ei,  02]”  with  the  following  semantics; 

Va  G  A  :  if  [p,  01,02] (a)  =  if  j)(a)  then  ei(a)  else  02 (a). 

The  set  ProgA  of  Update  Programs  on  A  is  recursively  defined  as  follows: 

•  idA  e  ProgA 


Ve  G  Ea:  e  G  ProgA 
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•  Vei,e2  G  Prog^,  Vp  G  Pa:  if  [p,ci,C2]  G  Prog^- 

•  V  Cl,  62  G  Prog^:  ci  •  62  G  Prog^.  (composition  of  operations) 

•  ProgA  does  not  contain  any  other  operations 

c)  A  Conditional  View  Update  is  a  view  update  program  which  contains  a  subex¬ 
pression  of  the  form  if  [p,  ei,  62]. 

EXAMPLE.  Consider  the  view  V4  of  Section  3.  Assume  a  vendor  wants  to  sell  three 
pieces  of  product  5  if  the  number  of  available  {)u;ces  of  product  5  is  equal  to  3  or  greater  than 
3.  Let  avail(s,n)  be  a  function  which  returns  for  each  vii'w  state*  s  the  number  of  available 
pieces  for  product  11.  The  conditional  view  update  then  c;m  be  formulated  as  follows: 

if  [Ax(avail(x,5)  >  3),SELL[5]SELL[5jSELL[5],idA,]. 

Since  we  extended  the  set  Ea  of  view  update  expressions  to  the  set  ProgA  of  view  uixlatc 
programs,  we  have  to  extend  the  domain  of  the  translation  function  r  to  ProgA-  hi  order  to 
do  this,  it  is  sufficient  to  specify,  how  idA  nnd  how  conditional  view  u])dates  are  transLated. 

DEFINITION  4.2.  (extension  of  r  to  ProgA) 

Let  V  =  (a,  r,  A)  be  a  view  of  D  and  let  A  =  (A,  Ua)-  We  extend  r  ;  Ea  — >  Ed  to  a  function 
r  :  Prog^  -♦  Prog^  as  follows: 

a)  r(idA)  =  ido 

b)  Vp  G  Pa,  Vei,C2  G  Prog^:  T(if  [Axp(x), 01,02])  =  if  [Axp(o(x)),r(ei),r(e2)]. 

Note  that  Axp(a(x))  is  a  predicate  on  D. 

c)  Vei,e2  G  Prog  a.:  r(ci  •  02)  =  r(ei)  •  7(02). 

It  is  easy  to  see,  that  this  is  the  most  natural  ;m<l  i)robably  the  only  “reasonable”  extension 
of  r  to  ProgA. 
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For  a  dat  abase  designer  who  wants  to  specify  a  translation  function  r,  it  is  thus  sufficient  that 
he  speeiJios  the  translation  of  each  primitive  update  in  Ua-  By  definition  4.2  this  function 
r  is  unambiguously  extended  to  the  set  ProgA  of  all  possible  view  update  programs. 

DEFINITION  4.3.  Let  V  =  (a,  r,  A)  be  a  view  of  D  with  A  =  (A,  Ua)- 

We  define  the  conditional  closure  of  V  as  follows: 

is  a  view  of  D; 

=  («■*■, where 

A+  =  (A,  ProgA) 

a'*’  =  a 

t'^  =  T  extended  to  Prog^^  as  in  definition  4.2 
Note  that  it  holds  =  V'^. 

V  ''  is  the  view  wliich  has  as  primitive  operations  all  possible  update  programs  of  V. 

In  the  following  we  will  show  that  V+  is  consistent  iff  V  is  consistent.  This  is  a  useful  result. 
It  can  be  interjn'eted  as  follows:  The  addition  of  conditional  uj)dates  docs  not  alter  the 
consistency  state  of  View.  It  is  thcrefon*  always  sufficient  to  consider  a  view  with  primitive 
(non  conditional)  operations  for  a  consistency  proof.  View  update  programs  can  be  iiscd 
without  the  danger  of  introducing  some  hidden  inconsistency. 

Before  showing  our  result,  let  us  prove  a  lemma. 


LEMMA  4.1.  Let  V  =  (a,r,A)  be  a  view  of  D,  then  the  two  relations  =*v=>  and 
=;*v  '  defined  on  D  are  the  same. 

PROOF.  We  have  to  show,  that  for  <U1  d,  d'  €  D: 

(d  =*v=>  d')  (d  =*v^=>-  d') 


=>”  this  part  of  the  proof  is  trivial,  since  Ea  Q  ProgA- 
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this  part  of  the  proof  can  be  done  by  induction  on  the  number  of  “if’s”  that  occur 
in  an  update  program  of  V.  We  only  state  the  main  idea  of  the  proof;  Let  d  d'; 

then  there  exists  an  update  progi’am  g  6  Prog^^  such  that  r(7(d)  =  d'.  Kg  does  not  contain 
any  conditional  subexpression,  then  g  —  id  a  or  g  G  Ea-  K  g  =  id  a  then  rg  =  id^  and 
d  =  d';  in  this  case  d  =*v=>  d'  holds  trivially.  K  g  €  Ea  then  d  d'.by  definition  of 

“  =*v=>  K  g  contains  some  conditional  subexpressions,  then  consider  g(a(d)).  It  is  easy 
to  show  that  g(a(d))  =  a(d').  Now  consider  the  series  of  update  expressions  ei  that  occur 
in  the  program  g  and  that  arc  effectively  apidied  during  the  evaluation  of  g(Q(d)).  Combine 
those  expressions  in  the  right  order  into  one  single  expression  e.  Cleaidy  e  G  Ea  arid  it  holds 
e(o:(d))  =  o{d').  By  how  r  is  extended  from  Ea  to  ProgA  (dcf.  4.2)  we  also  know  that 
rg(<l)  =  re(d)  =  d'.  From  re(d)  =  d'  we  immediately  conclude  d  =*v=^  d'.  □ 

THEOREM  4.1.  Let  V  be  a  view  of  D.  V  is  consistent  iff  V~  is  consistent. 

PROOF.  V  and  V+  have  the  same  abstraction  function  a  (dcf.  4.3).  The  relations  =*v=^> 
and  =*v'^=>  on  D  coincide.  In  Lemma  2.1  we  showed  that  the  consisti’iicy  of  a  view  V 
depends  only  on  a  and  on  =*v=>-  .  The  theorem  follows  immediately.  □ 

Before  concluding  this  section,  let  us  state  n  lemma,  which  will  be  usc'd  in  section  5. 

LEMMA  4.2.  Let  V  =  (^r,r,A)  be  a  view  of  D.  V+  is  consistent  iff  V+  is  connection 
preserving. 

PROOF.  It  sullices  to  show  that  if  V  preserves  connections  then  V  ^  also  preserves 
looiis.  lleineinlxT  that  V  '  contains  IiIa  <‘s  operation  ami  that  r(idA)  ido-  Suppose  that 
V  '■  is  connection  pix'sorving  but  not  loop  preserving.  It  lollows  by  definition  2.11  that  there 
exist  elements  di,d2  G  D,  such  that  ci:(dx)  =  0!(d2)  find  dj  — >  d2  and  dx  ^  d2-  Since 
idD(di)  =  di  it  also  holds  di  -*v  dx-  This  is  in  contradiction  with  the  assumption  that 
V'*'  is  connection  preserving.  □ 


5.  PRESERVATION  OF  PROGRAM  EQUIVALENCE 
AND  CONCURRENCY 


The  concept  of  view  update  program  which  was  introduced  in  the  last  section  is  at  the 
base  of  some  fundamental  j)ropertics  of  consistent  views.  In  this  section  w(?  show  that 
consistent  views  have  a  number  of  important  preservation  proi)erties.  We  will  first  consider 
the  equivalence  of  update  programs.  We  show  that  a  vic’w  is  consistent  if  and  only  if  its 
translation  function  r  translate's  any  pair  of  funct  ionally  ecpiivaleiit  view  update  (>rograms 
into  a  ))air  of  functionally  ecpiivident  database  update  programs.  Later  we  shall  draw  our 
attention  to  the  preservation  of  concurrency  propc'rties.  We  will  dc'fine  the  concept  of 
transaction  and  we  will  show  that  the  translation  function  r  i)reserves  commutativity  of 
transactions,  non-iuterfi'rence  and  serializability. 

5.1  PROGRAM  EQUIVALENCE 

Lot  us  now  giv(;  a  formal  definition  of  functional  equivalence  of  update  programs. 

DEFINITION  5.1.  Let  oi  and  02  be  two  np<lato  programs  of  a  data  absti'action  A 
=  (A,  Ua).  oi  and  03  are  functionally  equivalent  iff 

Va  G  A  ei(a)=C2(a). 

If  Oi  and  02  arc  functionally  equivalent,  we  write  Cx  =  02- 

DEFINITION  5.2.  Let  V  =  (u,r,A)  be  a  view  of  D.  r  preserves  equivalence  iff 

Vei,e2  G  Prog^  :  (ei  =  02)  =>  (r(ei)  =  7-(e2))  . 

Efor  a  view  V  =  (a,  r,  A),  r  preserves  equivalence,  then  we  also  say:  V  preserves  equivalence. 

THEOREM  5.1.  A  view  is  equivalence  preseiwing  iff  it  is  consistent. 
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PROOF. 

“if” 

“only  if” 


Tins  j)art  of  the  theorem  follows  easily  from  the  definition  of  consistency. 

Assume  V  =  (a,r,  A)  is  equiviilencc  preserving  but  not  consistent.  By  lemma 
5.2,  is  not  connection  preserving.  Therefore  there  exist  elements  d,  di, 
d2  G  D,  such  that 

d  — »  di 
and  d-*v'^— »-d2 
and  o(di)  =  o(d2) 
and  di  ^  d2 

From  this  we  infer  that  there  exist  two  different  database  update  programs  lii 
?uid  112,  lii,li2  G  Progp,  such  that  hi(d)  =  di  and  h2(d)  =  d2  and  such  that 
hi  and  h2  are  the  translations  by  r  of  two  view  update  programs,  respectively 
Cl  and  C2: 

hi  =  r(ei) 
h2  =  r(e2). 

Clearly  hi  and  hi  are  not  functionally  equivah'ut,  as  they  have  different  images 
in  d. 

Notice  that  for  (q  an<l  02  it  hohls: 

oi  (a(d))  -  «(<li)  =  a(d2)  =  C2  («(d)) . 

(This  equation  follows  from  the  fact  that  r  is  a  tnuislation  function). 

Although  Cl  and  (?2  eijuivah’iit  with  n'spi^ct  to  the  singli'  view  slate  «(d), 
it  does  not  necessarily  hold  that  ei  ami  02  ai’e  functionally  equivalent.  They 
might  differ  with  respect  to  other  view  states.  We  therefore  construct  the 
following  view  update  programs  for  fi  and  f2: 

fi=if  [Ax{x  =  Q(d))  ,ci,idA] 
fi  =  if  [Ax(x  =  rt(d))  ,02,  id  a] 

It  is  clear  that  fi  and  fi  arc  functionally  equivalent  view  update  programs. 
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Let  us  cxaiiiiiie  their  translations: 

rfi  =  if  [A;c  (n:(x)  ==  «:(d))  ,hi,hlD] 
rf2  =  if  [Ax  (o(x)  =  «(d))  ,112,1^0] 

Clearly  rfi  and  rf2  are  not  functionally  equivalent  since  their  images  in  d 
differ.  Therefore  V  is  not  equivahmcc  preserving.  □ 

Theorem  5.1  states  that  the  class  of  consistent  views  is  exactly  the  class  of  views  for  which 
a  functional  specification  of  a  view  update  is  sufficient  hi  order  to  functionally  determine 
its  translation.  This  property  is  of  highly  practical  relevance.  It  ensures  that  a  translation 
of  a  view  update  program  is  essentially  independent  of  the  particular  seqiu'nce  of  the  single 
operal  ions  of  the  program,  and  that  it  only  depends  on  the  semantics  of  tlii'  view  update. 

As  long  as  update  programs  are  atomic  actions,  functionally  eiiuivalent  update  programs 
might  be  interclnuigcd  without  any  problem.  Therefore  a  view  iirogrammi'r  who  operates 
on  a  consistent  view  might  change  the  structure  of  his  view  update  program,  for  example 
in  order  to  perform  some  optimization.  As  long  as  he  docs  not  change  th('  semantics,  the 
view  upilatc  program  needs  not  to  be  retranslated  into  a  new  database  update  piograni. 

This  high  level  of  independence  between  view  c'Uid  datiabase  makes  a  database  system  much 
more  accessibh’  for  theoretical  analysis.  Correctness  proofs  and  verifical.ion  of  global  trans¬ 
actions  (possibly  involving  dilferenl  views)  can  In*  done  by  using  formal  spi'cification  tech¬ 
niques. 

At  tin*  end  of  this  section,  we  will  give  an  cxamide  of  a  view  whicli  is  not  consistent  and  wo 
will  show  that  in  this  case  equivalent  view  update  programs  are  translated  into  database 
updates  which  are  not  eiiuivalent. 

5.2  CONCURRENCY 

Let  us  now  draw  our  attention  to  the  concurrency  problem.  Control  over  concurrency  is 
one  of  the  most  important  features  of  adv.aiiced  databa.se  management  systems  [28,29,30], 
but  the  interaction  between  views  and  concurrency  has  hardly  ever  been  analyzed. 
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There  are  three  main  questions  arising  when  the  interaction  between  views  and  concurrency 
control  is  considered: 

1)  How  can  a  set  of  concurrent  transactions,  op<'rating  on  the  same  view,  be  correctly 
translated  to  a  set  of  (hopefrdly)  concurrent  transactions  on  the  base? 

2)  How  can  a  set  of  concurrent  transactions  on  different  views  be  correctly  translated  to 
a  set  of  (hopefully)  concurrent  transactions  on  the  base? 

3)  What  is  the  interaction  (or  side  effc'ct)  between  transactions  of  differc'nt  views  imple¬ 
mented  on  the  same  base? 

In  this  j)aj)<'r  we  limit  ourselves  to  consid(*r  the  first  (piestion.  Wc'  will  show  that  the 
trmisaction  function  of  consistent  views  preserves  commutativity,  non-int  c'rft'rence  and  seri- 
alizability  of  transactions. 

Before  wc  can  proceed,  we  have  t(;  define  our  concept  of  transaction  and  the  above  men¬ 
tioned  properties  of  pairs  of  transactions. 

Since  wc  are  mainly  interested  in  translating  updates,  we  define  the  concurrency  j)r()peities 
of  two  transactions  with  respc'ct  to  tin*  ('fleet  that  tlu'se  updates  have  on  tlu'ir  data  abstrac¬ 
tion  (('ither  vi('W  or  database)  and  not  with  respi'ct  to  th('  outjuits  that  the  transactions 
may  issue  to  the  view  user. 

DEFINITION  5.3.  Let  A  =  (A,Ua)  be  a  data  abstraction. 

a)  A  transaction  T  on  A  is  a  finite  series  of  update  programs  p,-;  T  =  [piiP'ii  •  •  •  iPu]) 
where  j),  G  ProgA,  I  <  i  <  The  single  programs  p;  are  also  called  atomic 
actions  of  T  and  it  is  ;issumcd  t  hat  ('ach  pi  be  lu'rfornied  “atomically”  and  without 
the  piurallcl  interaction  of  <uiy  other  programs. 

If  T  is  a  transaction  then  T”  denotes  the  view  update  program  which  is  the  result  of 
the  composition  of  all  atomic  actions  of  T: 


T°  =  Pi  •  P2  •  •  •  Pa 
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If  Ti  =  [pi , . . . ,  Pnl  and  Ta  =  [p'l ,  •  -  • ,  p'.„l,  then  Ti  •  Tj  is  defined  as; 

Ti  -Ta  =  [pi,P2,---,Pu,p'i,-  -,Pml 
Note  that  it  holds  (Tj  •  Ta)°  ^  •  T^. 

b)  Two  transactions  Ti  and  Ta  arc  commutative  iff  it  holds; 

(Tx-T2)°  =  (T2-Ti)°. 

A  mix  (also  “schcdnle” )  of  a  piiir  of  transactions  Tx  =  [pi ,  •  ■  •  ,  Pnj)  Ta  =  [p'x , . . . ,  p(„j 
is  a  transaction  T  =  [Px ,  •  •  • , Pn-u^l  that  each  p!'  belongs  eitlier  to  Ti  or  to  Ta 

<1  iid 

VI  <  i  <  j  <  n  +  ii>,  VI  <  h,  k  <  n  ; 

(p!'=pu€TxAp"=pk€Tx)^h<k 

VI  <  i  <  j  <  n  +  in,  VI  <  h,  k  <  m  ; 

(pf  Ph  €  Ta  A  Pj'  =  Pk  €  Ta)  =>  h  <  k. 

Mix(Ti,  Ta)  denotes  the  set  of  all  transaction  mixes  of  Ti  and  Ta- 

Two  transactions  Tx  ami  Ta  are  nou-interfearing  (or  completely  concurrently 
executable)  if  tlu'  following  property  holds; 

VT  e  Mix(Tx,T2)  :  T°  =  (Tx  •  Ta)”. 

Note  that  if  two  transactions  are  non  inti'rfi'aring,  they  arc  also  commutative,  since 
Ta  •  Tx  repn'sents  a  particular  mix  of  Tx  luid  Ta- 

Let  T  be  a  mix  of  Tx  and  Ta-  T  is  said  to  In;  serializable  if  it  holds 

r  =  (Tx-T2)'’VT”  =  (T2-Tx)°. 

Note  that  the  concepts  of  non  interfenmee  <uid  scrizability  are  easily  generalizable  to 
sets  of  mon;  than  two  transactions.  For  the  sake  of  simplicity,  we  just  consider  pairs 
of  transactions  in  this  paper. 

c)  Let  V  =  (a,  r,  (A,  Ua))  he  a  view  of  D  and  let  T  =  [pi , . . . ,  P„]  be  a  transaction  on 
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A.  Wc  then  define  the  translation  rT  of  T  to  D  as  follows: 

r(T)  =  [r(pi),...,r(p„)]. 

Note  that  it  holds  r(T  )  =  (r(T))°. 

d)  The  translation  fimetion  r  of  V  is 

•  commutativity  preserving  iff  any  pair  of  commutative  transactions  Ti,  T2  is 
translated  by  r  into  a  pair  of  commutative  transactions  r{Ti),  r(T2)  on  D. 

•  concurrency  preserving  iff  any  juiir  Ti,  T2  of  non-interfearing  transactions  is 
translated  by  r  into  a  pair  of  non-interfearing  transactions  r(Ti),  r(T2)  on  D. 

•  scrializability  preserving  iff  any  serializable  mix  T  of  transactions  Ti,  T2  is 
translated  by  r  into  a  serializcxblc  mix  r(T)  of  t(Ti)  and  r(T2).  Whenever  r  has 
a  preservation  property,  wc  also  say  that  V  has  this  proj)erty,  for  instaiice  if  r  is 
commutativity  preserving,  then  we  say  that  V  is  a  commutativity  preserving  view. 

THEOREM  5.3.  Any  consistent  view  is 

a)  commutativity  preserving 

b)  concurrency  prcservijig 

c)  scrializability  preserving. 

PROOF.  Let  V  =  (a,r,  A)  be  a  consistent  view  of  D.  By  theorem  5.1,  we  know  that  V  is 
etjuivak'nce  presc'rving. 

a)  Assume  that  Ti  and  T2  are  two  commutative  view  transactitms:  (Ti  •  T2)‘’  = 

(T2  •  Ti)°.  Therefore  it  must  hold 

r((Ti-T2n  =  r((T2-Tx))°. 

Thus 

r(T^T^)  =  r(T^T^) 


33 


and  hence 

r(T°)-r(T'^)  =  r(T2^)-r(T°) 


and 


r(Tir  •r(T2)°  =  r(T2)‘’-r(Ti)° 


and  finally 

(r(Ti).r(T2)r  =  (r(T2)-r(Ti)r 


thus  r(Ti)  and  r(T2)  ar(!  coinmiitativo  transactions  on  D. 

Q.E.D 

b)  Assume  that  Ti  =  [pi , . . . ,  p,J  and  Tj  =  [p'l ,  •  •  • ,  p'„J  •'^re  two  nou-intorfoaring  trans¬ 
actions  on  V.  We  have  to  show  that  rTi  and  rT2  are  non  intorfcaring  transactions 
on  D.  Let  T'  be  an  arbitrary  mix  of  rTi  mid  rT2.  T'  is  of  the  form  [rp'/. . . .  ,pJv4m] 
where  p"i  €  Ti  or  p"i  €  T2  for  1  <  i  <  n  -t  m.  Let  us  define  a  transaction  T  on  A  as 
follows: 

t  =  (p';,...,p::,j. 

Clearly  T  is  a  mix  of  Tx  cand  T2  mid  it  holds  tT  =  L  .  Since  Tx  and  T2  are  not 
interfearing,  wc  have  T  =  Ti  •  T2.  Since  V  is  eciuiv.-ilence  jin'serviiig,  it  iiunu'diately 
follows:  rT  =  r(Ti  •T2)  which  can  be  rewritten  ;is:  T'  =  r(Ti  -72).  Since  r(Ti  -72)  = 
r(7i)  •  t(72)  we  finally  get  7'  =  r(7i)  ■  r(72). 

7hus  r(7i)  and  r(72)  are  nou-interfearing. 

Q.E.D. 

c)  Let  7i,  72  he  transactions  on  V  and  let  7  be  a  seriali/.abl»>  mix  of  7i  and  T-i.  Assume 
without  less  of  generality  that  7  =  7x  •  72-  It  then  follows 

r(7)  =  r(7x-72)  =  r(7x)-r(72). 

7hcrcforc  r(7)  is  serializable  with  respect  to  7-(7i)  and  r(72). 

Q.E.D 
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Notice  that  the  properties  of  commutativity,  non-iiitcrfercnce  and  serializability  arc  defined 
independently  of  particular  operations,  such  as,  for  example,  lock  and  release  operations  of 
differ ert'iit  granularities. 

Lock  and  release  primitives  can  bo  modeled  explicitely  as  particular  elements  of  the  set  of 
operations  Ua  of  a  data  abstraction  A.  Clearly  the  static  data  model  (the  set  A)  has  to 
be  predisposed  for  locking.  For  example,  if  the  possibility  of  write- locks  at  the  graiudaiity 
of  relations  is  desired,  then  to  each  datarelation  of  the  static  model  should  be  attached 
a  booh'an  value  with  the  function  of  “locking  flag” .  Locking  and  releasing  then  can  be 
rnodc'lerl  by  setting  and  resetting  this  flag.  Update  operations  in  such  a  model  arc  programs 
which  arc  conditional  on  the  value  of  locking  flags. 


Note  that  the  preservation  of  commutativity,  conciirrcncy  and  serializ.ability  are  necessary 
but  not  sufficient  conditions  for  the  consistency  of  a  view.  It  is  possible  to  construct  patho- 
logiciU  views” ,  which  arc  for  instance  commutativity  preservuig  but  not  consistent. 

We  conclude  this  section  with  a  brief  example  of  a  non  consistent  view. 

(loiisid('r  the  database  of  section  3.  Let  view  V7  be  as  vi(?w  V5  with  additional  operations 
BUY[i|  defined  as  follows: 

View  oi)erations:  BUY[i]  increments  the  QTY-AVAILABLE  value  for  product  i  by  1. 

Translation:  r(BUY[i])  =  BUY[ij  adds  a  new  tuple  for  product  i  to  the  PIECES  rela¬ 

tion.  Let  d  be  a  datakisc  state.  Let  uuix(i,x)  be  a  function  which  for  a 
databjise  state  x  retunis  the  highest  value  of  PIECE#  that  exists  in  state 
X  for  product  i  (if  there  is  no  piece  for  product  i  then  m.ax(i,x)  =  0). 

The  BUY[i]  operation  applied  to  a  datiib.isc  state  d  then  adds  the  tuple 
(i,  m<ix(i,d)  4-  1,  false)  to  the  PIECES  relation. 

Consider  the  database  and  view  state  dcpickcd  in  figure  3.1  and  tlic  following  two  view 
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update  programs  pi  and  p2  for  V7: 

Pi  :  if  [Ax(avail{i, x)  >  1),  SELL[l]BIIY[l],id^y] 

P2  :  if  [Ax(avail(l,x)  >  1),  BUY[l|SELL[l],id^7] 
where  avail(n,x)  is  a  function  which  returns  the  number  of  available  pieces  for  product  n 
and  for  view  state  x. . 

Ch'arly  pi  mid  P2  arc  functionally  equivalent  view  updates.  Unfortunately  this  does  not 
hold  for  the  translation:  Consider  the  database  state  d2  of  figure  3.1.  r(j)i)  will  first  delete 
the  piece  with  number  087  from  the  database  mid  then  introduce  a  new  piece  of  productl 
with  piece  number  0C7.  r(p2)  first  introduces  a  new  iiiece  with  number  088  for  product 
number  1  and  then  deletes  this  piece.  Therefore  our  view  V7  is  not  equivalence  preserving 
and  thus  not  consistent. 

It  is  easy  to  see  that  V7  does  not  preserve  commutativity;  consider  for  example  the  two 
transactions 

Ti  =  [SELL[1]] 

T2  =  [BITY[1]] . 


6.  THE  TRANSLATION  OF  VIEW  UPDATES 


In  tins  section  we  will  disenss  some  aspects  of  the  well  known  view  uinlate  problem.  Let  us 
first  reformulate  this  problem,  using  the  notation  and  formalism  intro.luced  in  section  2. 

Let  D  =  (D,Ud)  be  a  database,  let  A  =  (A,Ua)  be  a  data  abstraction  .such  that  there  exists 
a  surjective  function  a:D  — ►A.  The  pair  (o;,A)  then  constitutes  a  static  view  of  D  (dcf. 
2.1).  The  view  update  problem  can  be  stated  by  means  of  tlu'  following  three  questions: 

1.  Is  it  possible  to  find  a  translation  function  r,  such  that  the  triple  (o,  r.  A)  is  a  (dy¬ 
namic)  view  ? 

2.  Which  conditions  on  a  an<l  on  Ua  niiist  be  satisfied  in  order  to  guarantee  that  a 
translation  r  exists? 

3.  If  there  are  different  possibilities  to  choose  a  translation  r,  how  can  we  characterize 
the  different  possible  choices? 

The  pioneer  work  in  solving  the  view  update  problem  has  been  carried  out  by  F.  Bancilhon 
and  N.  Spyratos.  hi  their  papiT  [Ij  it  is  shown  how  the  choice  of  an  update  policy  r  can 
be  made  by  deciding  which  portions  of  the  datab;ise  should  n'lnain  coiistcaiit  (coinphunent). 
Choosing  a  complement  that  n'linuns  inv.u-iaiit  luuh'r  all  translatt'd  operations  assigns  un¬ 
ambiguous  semantics  to  a  view  update.  Formally,  a  complc'ment  of  the  static  view  (o!,A) 
can  be  (h'fined  as  a  mapping  P  as  follows: 


DEFINITION  G.l.  Let  (o,  A)  be  a  static  view  of  a  database  D  =  (D,Ud).  U’t  P  l>e  a 
surjective  function  from  D  onto  a  .s«'t  B,  /I:  D  — *•  B.  P  is  a  complement  of  a  iff 

Vd,  d'  G  D  :  a(d)  =  a(d')  =>  P{d)  ^(d'). 

It  is  easy  to  see  that,  if  is  a  complement  of  a,  then  the  knowledge  of  tt(d)  and  of  /1(d) 
uni(}uely  determim's  the  database  state  d.  Thus  p  is  indei'd  a  mapping  lompleinentaiy 
to  a,  and  the  knowledge  of  both,  «  and  P,  is  sufficient  for  computing  the  database. 
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In  [l].  tlu'  property  of  a  set  of  update  operations  U  C  Ua  to  be  translatable  under 
constant  complement  P  is  referre<l  to  as  the  ^-translatability  of  U. 

DEFINITION  6.2.  U  is  /3-translatable  ilf  Vd  e  D,  Vu  6  U  3  v  G  Ep  3  d'  G  D: 

(v(d)  =  d'  A  o(d')  =  u(«(d))  A  P(d')  =  /5(d)). 

Our  (h'iinition  of  /3-translatability  differs  slightly  from  the  original  one  [1].  berause  in  our 
model  the  database  D  is  an  algebra  with  a  W(dl  defined  sc't  Uo  of  possible  oj)evations,  while 
in  [1]  a  (lat.-ibase  is  a  set  of  states  on  which  all  com])utable  operations  may  be  pt'rformed; 
tlu'refore  we  must  n'(iuire  the  existence  of  v,  such  that  v(d)  =  d^  This  difference  does  not 
essentially  change  the  concept  of  /5-tr<uislatability.  Our  algebraic  definition  of  a  database 
is  more  general  and  has  the  advantage  that  it  may  be  used  in  cascades  ,  i.e.,  a  view  of  a 
database  may  act  as  a  base  for  a  deeper  level  view  to  constitute  a  laycjred  systmu  of  views. 

W(!  can,  more  g('uer<dly,  define  the  /5-translatability  of  a  static  view  (o,  A)  by  . 

DEFINITION  6.3.  (<r,  A)  is  /3-tr.uislatable  ill  ft  is  a  complenumt  of  a  and  the  entire  set 

* 

of  vi(^w  upilatc;  operations  IJa  is  /f-tnuishitable. 

DEFINITION  6.4.  If  («,r,A)  is  a  view  of  D,  and  ^  is  a  complement  of  a,  such  that 
Vu  G  Ua  Vd  G  D  :  /5(ru(d))  =  /9(d),  then  we  say  that  the  com])lement  ft  is  constant  under 
translation  r  or  r  translates  under  constant  complement  /9. 

If  (rv,  A)  is  /9- translatable  for  some  complement  /9,  we  also  say  th.at  it  is  translatable  under 
constant  complement. 

Among  the?  results  of  Bancilhon  and  Spyratus,  wc  present  the  two  most  important  ones, 
translated  into  our  terminology. 

PROPOSITION  6.1.  If  A  is  cyclic  and  (a,  A)  is  //-translatable,  then  there  exists  exactly 
one  translation  r  such  that  V  =  (a,  r.  A)  is  a  loop  pniserving  view  of  D  and  fi  is  constant 
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imdcr  translation  r.  t  is  uniquely  determined  by  through;  Vu  G  Ua  :  tu  -  (a  x  /3) .  ^ 
(\ia  X  /3).  (for  more  details  see  [1]). 

PROPOSITION  6.2.  If  A  is  cyclic,  then  for  each  translation  r,  such  that  V  =  (a,r,A) 
is  a  loop  preserving  view  of  D,  there  exists  a  complement  /?  of  a,  such  that' 

a)  (a,  A)  is  /3- translatable 

b)  the  relation  “  =+v=>  ”  is  an  equivalence  relation 

c)  th('  coniph'inent  ft  of  a  is  given  by;  /)(d)  =  d  where  d  is  the  equivalence  class  of  d 
with  respect  to  =*v=>-  . 

Consider  view  V2  of  the  database-example  defined  in  section  3.  It  is  easy  to  see,  that  the 
complement  ft2  of  which  corri'sponds  to  the  translation  T2  is  as  follows; 

Vd  =  (b,p)  e  I)  ;  /?2(t’,p)  = 

Clcm-ly  ft2  is  constant  under  rj,  since  breaking  or  repairing  pieces  does  not  alter  the  BILL 
ri'lation. 

In  a  similar  way,  a  complement  ft^  of  oq  which  determines  tq  is  defined  by 

Vd  =  (b,p)  €  D  ;  /?6(b,p)  =  P- 

Cle;u-ly  fta  is  constant  under  tq,  since  clnuiging  tlie  price  of  some  products  does  not  afrt>ct 
the  information  contained  in  the  relation  PIECES. 

Note  that  the  static  views  considered  by  Bancilhon  iuid  Spyratos  must  be  cyclic.  Note 
Jiirthernion'  tliat  t  heir  theory  applies  only  for  the  cluu-acteri/.al  ion  of  loop  prcucrviny  views. 
By  theorem  2.1,  we  therefore  conclude  that  the  views  tri'ated  by  Bancilhon  and  Spyratos 
are  exactly  the  cyclic  parliiioning  views.  This  is  the  class  of  views  corri'siionding  to  the 
innermost  area  of  figure  2.4  (or  respectively  figure  3.2). 

However,  the  reipiin'ment  of  cy<;licity  is  not  strictly  necc-ssary  for  translation  under  constant 
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complement.  The  following  observations  will  lead  to  a  first  generalization  of  the  theory  of 
Bancilhon  and  Spyratos. 

OBSERVATION  6.1.  The  cyclicity  condition  of  proposition  6.1  can  be  omitted.  This 
is  justified  by  the  fact  that  the  proofs  in  [1]  for  the  original  formulation  of  proposition  6.1 
do  not  use  the  cyclicity  property. 

OBSERVATION  6.2.  hi  proposition  6.2.a,  instead  of  requiring  the  cyclicity  of  A,  the 
more  general  requirement  that  A)  be  base  partitioning  is  sufficient.  In  the  context 
of  proposition  6.2  this  requirement  is  indeed  more  general,  since  we  arc  considering  only 
loop  preserving  but  not  necessarily  cyclic  views.  Any  loop  preserving  and  cyclic  view  is 
partitioning,  but  there  exist  many  interesting  views  which  are  ])artitioning  (and  therefore 
also  loop  preserving)  but  not  cyclic  (for  example  View  1  and  View  3  of  section  3).  Note 
that  the  parts  b  aird  c  of  Proposition  6.2  are  not  necessarily  valid  if  we  rcqilace  tlu?  cyclicity 
requirement  by  the  more  general  requirement  of  a  vievr.  the  relation  =*v=^  then 

is  not  necessarily  an  equivalence  relation.  We  can  overcome  this  difficulty  by  considming  the 
equivahmee  relation  induced  by  tlu*  jiartitioii  of  the  view,  instcvul  of  considering  =*v=>  . 
Let  <5  denote  the  cquividimce  relation  on  D  indu<  ed  by  the  partition.  Parts  b  and  c  of 
Proposition  6.2  become  tnie  if  we  substitute  for  =*v=>'  . 

The  above  observations  suggest  that  there  exist  a  strong  coniu'ction  between  the  concept 
of  “partitioning  view”  and  the  concept  of  “translatability  under  constant  complement” .  In 
facts,  these  two  concepts  fire  equivalent.  This  is  formally  stated  in  the  following  theorem. 

THEOREM  6.1.  A  view  («,r,  A)  of  luise  D  p.irt  ii  iones  l.he  b;is<?  ilf  then'  exists  a  com¬ 
plement  /?  of  a,  such  that  f)  is  constant  under  translation  r. 

PROOF. 

“if”  Let  f}  bo  a  complement  which  is  constant  under  r.  Let  B  =  /3(D).  Let  D*  denote 

/3“^(x)  for  X  e  B.  Thus,  Dx  denotes  the  set  of  all  elements  of  D  which  arc 
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mapped  to  x  by  It  is  trivial  to  verify  that  the  family  of  sets  (D^  |  x  G  B}  has 
exactly  the  properties  of  partitioning  classes  required  by  Definition  2.13. 

“only  if  Assume  (Q,r, A)  is  partitioned.  Consider  the  equivalence  classes  Di,...,Dic 
which  constitute  the  partition  as  defined  in  def.  2.13.  Let  /3  be  defined  as: 
Vd  G  D  :  /3(d)  =  d  where  d  denotes  the  unique  equivalence  class  Di,  such  that 
d  G  Di.  It  follows  trivially  from  property  b  of  Definition  2.13  that  is  a  com¬ 
plement.  From  property  a  of  the  same  definition  it  follows  that  /3  is  constant 
under  r. 

Q.E.D. 

By  this  simple  generalization  of  Bancilhon  and  Spyratos’  theory,  we  are  now  able  to  state 
the  update  semantics  of  our  view  VI  by  defining  the  complement  /3i  as  follows: 

/3i:  STORE  ->  BILL;  V(b,p)  G  D  :  ^i(b,p)  =  b. 

For  the  complement  Pz  of  the  view  V3  it  holds:  Pz  —  (^i- 

Note  that,  the  views  VI  and  V3  are  kind  of  views  which  are  not  considered  in  [l]  because 
they  ar(!  not  cycle. 

We  tlius  have  characterized  the  class  of  j)artitioning  views  ;is  the  class  of  view.s  which  arc 
updatable  under  constant  couiplernent.  The  (Xiuivalence  of  these  two  notions  was  quite  obvi¬ 
ous.  A  more  difficult  problem  is  the  characterization  of  consistent  but  not  partitioning 
views.  By  theorem  6.1  we  know  that  such  views  do  not  translate  u])datcs  under  constant 
complement. 

For  example,  h't  us  consider  view  V4  defined  in  sectiem  3.  It  is  c;isy  to  verify  that  the 
mapping  stich  that  V(b,p)  G  D  :  =  p  is  a  complement  of  0:4. 

04  is  ill  a  sense  the  most  “reasonable”  comiiloment  we  can  find,  in  order  to  express  the 
information  hidden  to  the  user  by  04.  However,  this  complement  does  not  remain  constant. 
It  looses  information  whenever  a  nontrivial  update  operation  is  issued.  More  generally, 
it  is  easy  to  show  that  every  complement  of  04  looses  information  wlnui  the  view  V4  is 
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updated,  using  the  strategy  when  a  piece  of  a  product  is  sold,  the  tuple  associated 
with  the  piece  is  eliminated  from  the  database.  This  tuple  contains  also  the  piece  number, 
which  is  invisible  to  the  view  user.  Therefore  we  can  say  that  updating  V4  causes  a  loss  of 
information  not  visible  to  the  view.  Since  the  lost  information  was  not  visible  to  the  view, 
it  did  belong  to  the  complement. 

Since  wo  have  shown  that  the  class  of  consistent  views  is  of  practical  relevance,  it  is  necessary 
to  define  exactly  what  is  the  characterization  of  their  update  semantics.  In  the  next  section, 
we  show  how  it  is  possible  to  extend  the  approach  of  Bancilhon  and  Spyratos  in  order  to 
cai)ture  the  update  semantics  of  the  entire  class  of  consistent  views. 


7.  UPDATE  SEMANTICS  OF  CONSISTENT  VIEWS 


The  basic  idc'a  of  the  theory  developed  in  this  section  can  be  stated  as  follows. 

Let  (a,  A)  be  a  static  view  of  a  database  D  cind  let  -<•  B  be  a  complement  of  (o!,A)- 
We  will  stnictnre  the  set  B  of  complement  values  by  a  partial  ordering  such  that  it 

bexomes  a  partially  ordered  set  (poset).  Intuitively,  /1{<1')  <  P{d)  has  the  following  meaning: 
All  information  contained  in  P{d')  is  also  contmued  in  |d{d),  but  fi[d  )  may  contain  less 
information  than  /3(d). 

We  will  furthermore  recpiire  that  the  piirtud  ordering  <  determines  nnambignonsly  an  up¬ 
date  policy.  For  this  re;ison  we  will  introduce  the  notion  of  o;-/3-decisivencss  (Dc'f.  7.2).  Wc 
will  restrict  the  number  of  possible  orderings  <  on  /i(D)  by  considt'ring  only  a-/3-dcci3ive 
orderings.  It  will  become  ch'ar  later,  that  these  orderings  arc  suHicitmt  to  determine  all 
consistent  update  policies. 


DEFINITION  7.1.  Let  (X,  <)  denote  a  finite  poset.  Let  a  mid  b  be  two  elements  of  X. 
An  element  c  G  X  is  an  upper  bound  of  a  .lud  b  with  respc'ct  to  <  iff  a  <  c  and  b  <  c.  If 
there  exists  an  upper  bound  for  a  and  b  then  we  write  a  ]  b  else  we  write  a  -f  b. 

DEFINITION  7.2.  Let  (a.  A)  be  a  static  view  of  D,  let  /3  be  a  complement  of  a  and  let 
be  a  partial  ordering  defined  on  /3(D).  The  partial  ordering  <  is  called  o:-/3-decisive  iff 
Vd,  d'  e  D:  ((d  d'  A  o(d)  =  tt(d'))  =>  /9(d)  ^  /3(d')). 

We  are  now  able  to  introduce  our  generalization  of  the  notion  of  /3-translatability  of  Ban- 
cilhon  and  Spyratos. 


DEFINITION  7.3.  Let  (a.  A)  be  a  static  view  of  D,  let  /3  be  a  complement  of  a  and  let  < 
be  an  a-/3-decisive  ordering  on  /3(D).  A  view  update  operation  u  G  Ua  is  /3-<-tran8latable 
iff  Vd  G  D,  3d'  G  D: 


d  =*=:>  d'  A  Q:(d')  =  u(a(d))  A  /9(d')  <  /3(d). 
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If  each  update  operation  of  the  static  view  (a,  A)  is  /?-<- translatable,  then  we  say  that  the 
static  view  (a,  A)  is  /I-<-translatable. 

The  notion  of  ^-<-translatability  is  the  basic  definition  which  is  necessiiry  for  introducing  the 
concept  of  “translation  under  loss  of  information.”  Informally,  the  condition  /3(d  )  <  /3(d) 
states  that  the  complement  of  an  updated  database  state  can  never  contain  more  information 
than  the  complement  of  the  original  state,  if  the  database  update  is  a  translation  of  a  view 

ujxlate. 

It  is  easy  to  see,  that  /■l-<-translatability  is  indexed  a  generalizal  ion  of  ^-trnnslatability  as  de¬ 
fined  in  [1].  Observe  that  “=”  constitutes  an  o-/3-decisive  parlial  ordering  on  /3(D).  Bancil- 
hon’s  and  Spyratos’  concept  of /3-translat.ability  tln'rofore  coincides  with  /3-=:-translatability. 

In  the  following,  let  us  assume  that  (a.  A)  is  a  static  view  of  D  mid  that  /3  denotes  a 
comph'iuent  of  a,  such  that  (o,A)  is  /3-<-t,ranslatable  for  a  given  p;irtial  orch'ring  <  on 
/3(D).  [This  assumption  is  made*  for  the  following  Definition  7.4,  for  Lemma  7.1  and  for 
Definition  7.5]. 

DEFINITION  7.4.  For  each  u])date  expression  u  G  Ea  imd  for  each  database  state 
d  G  D,  m'.  define  a  set  Su,d  ;\s  follows: 

-  {d'  1  d'  G  D  A  d  -*->  d'  A  o:(d')  -  u(n(d))  A  P{d')  <  /3(d)}. 

S„  ,1  consists  of  all  database  states  in  which  d  is  allowed  to  be  transformed  whenever  «(<!) 
is  updated  by  u. 

LEMMA  7.1.  card(a„,d)  =  I-  . 

PROOF.  Since  a  is  /3-<-translatable,  Su,a  is  not  empty.  Assume,  Su,a  has  two  (Ulfer- 
ent  elements  dl  and  d2.  By  the  definition  of  Su,d  it  holds:  u(dl)  =  a(d2);  since  dl  ^  d2 
it  therefore  must  hold  /3(dl)  #  /3(d2).  Furthermore  it  is  /3(dl)  <  p{d)  and  /3(d2)  <  /3(d)  and 
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thus  /3(dl)  t  This  is  a  contradiction  to  the  a-/]- decisiveness  of  <.  Therefore,  S„,a.is 

a  singleton. 

Q.E.D. 


DEFINITION  7.5.  For  each  update;  operation  u  €  Ua,  we  define  a  function  cr„  on  the 

set  /5(D)  as  follows:  _  _ 

eTu:/5(D) -./5(D}; 

a„(/j(d))  =  fl{d')  such  that  d'  e  S„,d- 

By  Lemma  7.1  ct^  is  well  dedined  for  each  /5  and  <.  Since  cTu  depeiuls  on  /5  and  on  the 
particular  partial  ordering  <  we  slioidd  corre'ctly  write  eT^,<,,u  instc'ad  of  For  simplicity 
w('  just  write  <t„,  when  /5  and  <  are  determined  by  tlu'  context. 

Informally  speaking,  (T„  is  the  ujxlatc'  tliat  must  be  applied  to  tlu'  comj)lemcnt,  when  the 
view  is  updat  e'd  by  an  update  operation  u. 

We  arc  finally  able  to  state  the  lirst  important  theorem  of  this  section,  which  establishes 
the  correspondence  between  orderc'd  complements  of  a  static  view  on  one  luuitl  mid  update 
policies  which  extend  the  static  view  to  a  dynamic  view  on  the  other  hand. 

THEOREM  7.1.  Assume  that  (a.  A)  is  a  static  view  of  D  mid  that  fi  denotes  a  coin- 
pleiiKuit  of  fv,  such  that  (o,  A)  is  /5-<-translatab]e  for  a  given  partial  ordering  <  on  /5(D). 
The  trmislation  function  r,  defined  below  extends  the  static  view  (n.  A)  to  a  dynamic  view 
(a,  r.  A)  of  D: 

tiUa  — +  Ed  Huch  that 

Vu  €  U„  :  ru  =  («  X  /5)-^(un!  X 
wlu'i'i'  fT|,  is  defined  as  in  Definition  7.5  from  /5  mnl 

r  is  called  the  /5-<-tran3lator  for  Ua- 

PROOF.  Let  us  first  observe  that  r  is  well  defined,  since  (a  x  ft)'  ^  is  a,  function.  This 
bcTause  ft  is  a  complenH'nt  of  «  and  therefore  {«  X  ft)  is  one-to-one.  Let  d'  denote  the  only 
element  of  the  singleton  Su,d-  It  then  holds  by  Definition  7.5:  (T„(/5(d))  =  /5(d')  and  by 
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dcfinilion  7.4:  n(a(d))  =  Q:(d').  Therefore  we  have 

rit(d)  =  (a  X  y9)''^{na  x  Ou/?(d)) 

=  {a  X  f3)~^(ua(d)  x  fT^P{d)) 

=  {axpy^{ah{d')xfl{d')) 

=  d' 

Thus  Vd  e  D:  ru(d)  =  d'  siich  that  d'  E  Su,d- 

We  iimst  now  show  that  a  is  a  honioniorphisin  with  respect  to  r  (see  d('f.  2.3).  V\'e  have  to 
show  tliat  Vd  G  D  Vu  G  Ua:  Since  Tn(d)  =  d'  G  S„^,i  it  holds 

tt(ni(d))  =  o(d')  =  u(a{d)).  But  n(n'{d))  =  n(a).  Tliert'fore  a(rii(d))  =  o(d')  —  u(a). 

Q.E.D. 

COROLLARY  7.1.  Lot  (a,  A)  be  a  static  view  of  D  and  r  be  a  ^-<-translator  for  Ua- 
It  holds:  Vu  G  EAiVd  G  D:  ni(d)  =  d'  snch  that  d'  G  S„,a- 

PROOF.  For  u  G  Ua  the  assertion  of  this  corollary  w;vs  already  proved  in  the  proof  of 
Tlu'orem  7.1.  The  gi'iieralization  to  Ea  follows  ciisily  by  induction. 


THEOREM  7.2.  E  («,A)  is  a  static  view  of  D  and  t  is  a  ^-<-tr<inslator  for  Ua  then 
the  view  (a,  r,  a)  is  consistent. 


PROOF.  Assnme  (a,r,  A)  i.s  not  consistent:  there  exist  d,  d',  d"  G  D  with  d'  /  <1",  such 
that  d  -*v=>’ d'  and  d  d"  and  a(d')  ^  '>'{d").  Then  there  exist  v,  w  G  EawSUcIi  that 

d'  =  r  v(d)  and  d"  ~  r  w(d).  By  C<)rollary  7.1.  it  follow.s  d'  G  Sv,,i  and  d"  G  Sv„,a-  Since 
r  is  a  translator  and  a  is  a  hoinoinorphisin  witli  respect  to  r  it  holds:  v(('v;(d))  =  w(a(d)); 
therefore  Sv,d  =  Sw,a  and  thus  d'  =  d".  Contradiction. 

Q.E.D. 

We  have  thus  shown  that  <ill  views  (a,  r,  A),  where  r  is  a  /?-<-translator  for  Ua  are  consistent. 
If  we  succeed  in  showing  the  converse,  i.e.  that  for  all  consistent  views  (a,  r,  A)  there  exist 
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/3  and  <  such  that  r  is  a  (d-<-translator,  then  wc  have  completely  characterized  the  variety 
of  consistent  views. 

DEFINITION  7.6.  Let  V  =  (a,r,  A)  be  a  view  of  D.  Let  ^caTi  be  a  function  defined  as 

follo’^s;  _  _  _ 

(powerset  of  D) 

Vd  e  D  :  /?can(<l)  =  {d'  !  d  d'}. 

We  call  fleau  tilt?  canonical  complement  of  for  the  view  V.  (This  term  is  ju.stific;d  by 
the  following  Lemma). 

LEMMA  7.2.  If  V  is  consistent  tln'ii  Penn  ‘s  ^  complement  of  a. 

PROOF.  Let  a(d)  =  a{d')  and  d  d'.  Then  it  cannot  hold  d  =*v=>  d',  since  V  is 
consistent  (and  therefore  loop  preserving).  Thus  d'  ^  /?cau(d).  On  the  other  hand,  by 
definition  of  Pam  ^d  of  “  =*v=>  ”  it  holds  d*  €  /5ciuj(d*).  Therefore  /5c.an(d^)  ^  /3raii(d). 
Thus  Penn  is  ^  complcnu'nt  of  a. 

Q.E.D. 


We  now  state  the  secoml  important  tb<’orein  of  this  .section.* 


THEOREM  7.3.  Let  V  =  (a,r,A)  be  a  coii.sistent  view  of  D.  Let  Pam  denote  the 
canonical  complement  of  (x  for  V.  Lot  “C”  denote  the  set- theoretic  mclusion.  It  then  holds; 
Ua  is  /?c«ii-C-translat.ible  and  r  is  the  ^c,u,-C-translator  for  Ua- 

PROOF. 

a)  We  first  show  that  C  is  a-/3-decisivc,  i.c. 

Vd',d"  e  D  ;  (d'  ^  d"  A  a(d')  =  a(d"))  ^ean(d')  f  Penni^"). 

*  The  set  theoreticiU  induction  C  is  a  {nirtial  ordering  which  .satisfies  the  critc'ria  for  a-P 


decisiveness. 


47 


Assume  d'  ^  d"  and  a(d')  =  a(d'')  but  /3can(d')  T  /?can(d")-  Let  d  G  D  such 
that  /?cau(d)  is  an  upper  bound  for  both  /?cim{d')  and/9can  (d")-  Tliis  means 
/3can(d')  C  /3can(d)  aiid  i3cau(d")  Q  i3c„„(d).  Since  d'  G  ^can(d')  and  d"  G  ^can(d") 
it  follows  d',  d"  G  /3caii(d},  and  therefore  d  =+v=>  d'  and  d  =*v=>  d".  This  is  in 
contradiction  with  the  consistency  of  V.  Thus  C  is  a-/?-decisive. 

b)  We  show  that  Ua  is  /9cun-C-translatablc.  Let  ru  G  Ed,  and  d,  d'  G  D  such  that 
d'  =  ru(d).  It  then  holds  d  =*v=>  d'  and  therefore  d'  G  /?cau(d).  From  the  definition 
of  /3cau  and  from  the  temsitivity  of  “  =  *v=>  ”  it  then  follows  easily  /?cau(d')  C  /3can(d), 
which  proves  the  /3(.an'Q"frauslatability  of  Ua- 

c)  That  r  is  the  /3can-C- translator  for  Ua  can  easily  be  verified  by  considering  an  update 
u  G  Uai  fiia  corresponding  mapping  as  introduc(Ml  in  Definition  7.5  and  by  showing 
ru  =  (a  X  f3)~'-{na  x 

Q.E.D. 

This  theorem  completes  the  formal  framework,  which  enables  us  to  define  the  update  se¬ 
mantics  of  any  consistent  view  by  specifying  a  complement  and  a  partial  ordering  on  the  set 
of  complement  values.  Let  us  now  reconsider  the  views  V4  and  V5  of  our  ('xamph'-database. 
We  choose  the  same  complement  for  both  views: 

V(b,p)  G  D  :  /?4(L,p)  =  /:l5(L,p)  =  P- 

Since  both  views  V4  and  V5  have  the  s;imc:  complement,  we  must  express  their  dilferent 
update  semantics  through  differemt  i>artial  orderings  on  the  set  of  complement  values.  Before 
doing  so,  let  us  define  two  particiilar  i)artial  ordering  relations  belwi'en  sets  of  integers,  which 
will  help  to  simi)liry  our  notation. 


DEFINITION  7.7.  Let  X  and  Y  denote  two  sets  of  integers.  We  say  that  X  is  a  postfix 
of  Y,  denoted  by  X$Y  iff  X  C  Y  mid  Vx  G  X,  Vy  G  Y  -  X  :  y  <  x.  (Here  “<”  has  its 
conventional  meaning).  We  say  l.hat  X  is  a  prefix  of  Y,  chmoted  by  X@Y  iff  X  C  Y  and 
Vx  G  X,  Vy  G  Y  -  X  :  y  >  X.  , 
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EXAMPLE.  Consider  tlie  example  of  section  2.  Let  Y  =  {1,2,5,7,8,10,14,15},  then 
{1,2,5}«^Y  but  {14,15}$Y.  Note  that  /?4(D)  =  /I5P)  =  PIECES,  i.e.  the  set  of  legal 
instances  of  the  relation  PIECES.  If  p  is  a  relational  instance  and  A  an  attribute  of  p,  let 
p[A]  denote  the  projection  of  p  over  the  attribute  A;  if  c  is  a  predicate  on  tuples  of  p,  let 
p(c)  denote  the  set  of  all  tuples  of  p  which  satisfy  c  (selection).  Combinations  of  selections 
and  projections  arc  written  without  parenthesis,  e.g.  p(c)[A]. 

We  are  now  ready  for  specifying  the  partial  orderings  <4  and  <5  for  respectively  the  view 
V4  and  V5. 

<4:  Vp,  p'  G  PIECES  ;  p  <4  p' 

p'  C  p  A  p' (BROKEN  =  true)  =  p(BROKEN  =  true)  A 
VI  <  n  <  100  : 

p' (BROKEN  =  false  A  PRODUCT#  =  n)[PIECE#]$p(BROKEN  = 
false  A  PRODUCT#  =  n)  [PIECE#]. 

<5:  Vp,  p' €  PIECES  :  p  <5  p' ^  ■ 

p'  C  p  A  p' (BROKEN  =  true)  =  p(BROKEN  =  true)  A 

VI  <  n  <  100  : 

p' (BROKEN  =  f;dse  A  PRODUCT#  =  n)[PIECE#|@p(BROKEN  = 
false  A  PRODUCT#  =  n) [PIECE#]. 

It  is  ('.-isy  to  see  that  <4  and  <5  are  indeed  pjirtial  orderings.  It  is  possible  to  prove  that 
<4  is  o:4-/34-docisive  and  that  <5  is  a5-/?5-dccisivc.  A  formal  proof  thereof  is  given  in  the 
appendix. 

That  Ua4  is  /?-< 4- translatable  and  that  Ua5  is  /9-<5-translatable  is  easily  verified,  a.s  well 
as  the  fact  that  <4  corresponds  to  r4  and  <5  corresponds  to  r^. 
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We  thus  have  specified  the  update  semantics  of  V4  and  V5  by  supplying  for  each  of  these 
views  a  complement  and  a  partial  ordering  on  the  complement  values. 


From  the  properties  of  these  complements  and  partial  orderings  we  furthermore  deduce  that 
V4  and  V5  are  consistent  views. 


8.  RELATED  WORK 


Paolini  and  Pclagatti  [5]  consid('r<‘d  a  database  as  an  abstract  object  upon  wliich  one  may 
operate  with  a  given  set  of  operations.  This  approach  is.further  developed  in  [G]  and  [7], 
where  databases  and  views  are  modeled  as  data  abstractions.  Also  Rowe  and  Schoens  [20], 
Claybrook  et  al.  [IG],  Lockeinann  et  al.  [21]  and  Weber  [25]  all  use  an  abstract  data  type 
approach  to  model  database;  views. 

Most  of  the  authors  who  have  been  studying  the  view  update  problem  concentrate  their 
attention  on  finding  ways  for  de-riving  translations  automatically  or  semi-automatically  by 
using  i)articular  update  policic's  or  by  restricting  the  set  of  allow(;d  update  i)olici('s.  Their 
derivation  rules  usually  arc  based  upon  notions  of  “natural  translation”  (tyi)ically  minimality 
of  side-effects)  and  eipon  constraints  on  the  data  model  and  on  the  database  instancc.'s 
(typically  functional  dependencies  for  relational  databases). 

Exaiiiples  of  this  approach  are  Dayal  and  Bernstein  [3]  for  automatic  translation  within  the 
context  of  the  relational  model  and  Dayal  and  Bernstein  [22]  for  automatic  translation  of 
updates  on  network  vu'ws.  In  [3]  only  views  which  are  combinations  of  proji'ctions  and  se¬ 
lections  and  joins  of  n'lations  are  considered.  A  careful  analysis  of  different  type's  of  update 
ope'rations,  sticli  as  iji.se'rtions,  d('l<‘tions  and  rei)lacements  is  given.  For  the-se'  type's  of  oi)C'r- 
al.ions,  Dayal  and  Bernsteuu  consieler  translat,ors  which  de)  not  iu'cessarily  leael  to  consistent 
views  in  the;  se'use  o[  our  eledinition.  On  the'  e)tlie'r  hand,  the'ir  ine)ele'l  e)f  vit'w  eli'linition  doe's 
not  ine  ludc  aggregate  functie)ns,  thus  tlwy  are  not  able  to  haiielle  such  important  views 
as  our  e'xamples  V4  anel  V5  (se'ctieui  3).  A  primary  objective  of  [3]  is  the  pre'servation  of 
inte'grity  e-euistraints  (fuiictiejiial  ele'pe'iiele'iicies). 

Sikle)ssy  [23]  cissuine's,  as  a  jjre'reeiuisite;,  that  vie'ws  preserve  loejps,  and  calls  this  property 
“mininud  admissibility”. 

Furtado  et  al.  [12]  prewide  rules  on  pennissivity  of  variems  t,yj)es  e)f  updates.  They  restrict  the 
number  e)f  cxlle)wcd  ui)date  opc'rations  and  cemcluele  that  “se)mc  e)pe'ratie)n  must  be*  prediibited 
in  oreler  to  assure  harmonious  inte'rae:tion  ;une)ug  elatabasc  users” . 
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Fagin  ct  al.  [11]'  provide  a  framework  for  the  interpretation  of  updates  in  the  context  of 
logical  databases. 

The  work  of  Bancilhon  and  Spyratos  [l],  outlined  in  section  6  of  our  paper,  has  stiimdated 
many  furtlnu-  investigations  by  different  researchers.  Cosmadakis  and  Papadimitriou  [9] 
show  that  finding  a  minimal  complement  of  a  given  vi('W  is  NP-completc.  They  adopt 
the  Universal  Relation  Assumption  [26]  and  their  views  are  essentially  projections  of  a 
given  univc'rsal  relation.  Keller  and  Ullman  [8]  deline  the  notion  of  indc'pendent  views  (i.e. 
views  whose  ranges  of  values  may  be  achieved  independently)  and  consider  the  rel.itionship 
Ix'tween  comiilernentary  A'iews  and  ind<‘|>eudent  vi<'ws.  Our  own  work  is  partiallj  based  on 
Bancilhon  and  Spyratos'  ideas.  Sections  6  iuul  7  of  the  pn'sent  paper  generalize  the  notion 
of  “constant  complement”. 

In  [18]  <md  [27]  Keller  analyzes  the  possible  translations  of  of  particular  classes  of  update 
operations  for  relational  views  (The  considered  updates  anr,  as  in  [3],  insc'rtions,  deletions 
and  replacements.)  K(>ller  gives  fiv(?  criteria  that  all  candidate  update'  transladous  must 
satisfy.  The  satisfaction  of  these  criteria  implies  restrictions  on  the  vh>w  delinitioii  function 
a  and  on  the  form  of  vi('\v  update  expressions  that  our  ai)proach  does  not  re(iuiro.  hi  Kelh'r’s 
model,  for  instance,  the  key  of  each  data  n-lation  that  may  b<'  alfected  by  updates  must 
appear  in  the  view.  Some  combinations  of  view  update  opi'rations  are  not  allowt'd,  such 
as  tlu'  replacement  of  a  tuph'  A  by  a  tupU-  B  followed  by  tin'  di'let.ion  of  tuple  B.  This  is 
due  to  th('  fact  that  Keller’s  translations  depend  on  the  particular  seciuence  of  the  view 
update  operations,  and  not  solely  on  the  functional  semantics  of  the  view  uiidate  (as  in  our 
approach).  As  in  [3],  aggregate  functions  are  not  covered.  On  the  other  Inuid,  Keller  s  model 
includes  some  interesting  views  that  are  not  covered  by  our  ajiiu-oach  (for  ('xample,  some 
nou-loop-i>reserving  views).  Kelh'r  also  shows  how  the  choice  of  a  traiislal.or  c.iu  be  done 
S('mi-automatically  by  a  program  whicli  coinlucts  a  dialog  with  the  data  base  administrator. 


9.  CONCLUSIONS  AND  FUTURE  RESEARCH 


The  overview  of  related  work  given  in  the  previous  section  shows  that  no  approach  \ni- 
dertaken  so  far  to  solve  the  view-update  problem  is  complete  in  the  sense  that  it  covers 
all  possible  views  of  practical  ndevance.  This  criticism  is  also  valid  for  onr  approach.  VVe 
do  not  claim  that  the  classes  of  views  studied  in  the  present  paper  capture  the  complete 
spc'ctrnm  of  all  “reasonable”  views.  We  believe,  however,  that  the  class  of  consistent  views 
covers  a  large  number  of  im})ortant  and  iiit(‘resting  apj)lications,  some  of  which  are  not  cov¬ 
ered  by  other  ai)proaches.  In  particular,  we  have  shown  that  the  class  of  consistent  vi(*ws 
is  a  su])erset  of  the  class  of  views  studied  by  Bamdlhon  and  Spyratos  in  [l{.  We  have  given 
example's  of  nontrivial  applications  that  can  be  modeh'd  by  our  aj)proach,  hut  not  by  the 
approach  described  in  [l]. 

W('  have  shown  that  consistent  vic'ws  are  characterized  by  extrtmioly  useful  proiXTties.  In 
I)articular,  we  provenl  that  the  consistency  of  a  view  is  not  airc<'ted  when  the  original  set  of 
update'  expressions  is  augmented  by  the  possibility  of  conditional  execution  of  vi(;w  updates. 
We  have'  she)wn  that  the'  translatie)n  fnuctiem  of  a  ceuisistcnt  view  prese'rve's  functional  e'quiv- 
alence'  of  upelate;  prejgrams,  as  we'll  as  a  numbe'r  of  importmit  e'e)ncurre'ne-y  pre)p('rties.  We 
have'  she)wn  that  the  upelate'  se'inantics  of  consiste'iit  vie'ws  c.ui  be  dete'rmineel  by  imposing 
a  {)art.ial  emU'r  e)n  the'  value's  e)f  the  vie'W  compleriu'iit. 

We'  be'lieve'  that  the'  class  of  consiste'iit  views  uu'rits  atte'iitiein  for  its  gooel  prope'rties.  Ileiw- 
e've'r,  ineire  re'se'arch  is  ne'e'eh'el  in  eireh'r  to  re'iieh'r  our  results  more?  applicable?.  Li't  us  concluele? 
this  paper  by  giving  some?  outline's  of  the  re'se'arch  we  plan  to  carry  out  in  the  near  future: 

•  Study  the'  [U'ope'rtie's  of  elilfere'ut  tyiie's  of  relalieiiial  views  (jireije'e'tive?  views,  se?- 
h'ct.ive'  vie'ws,  jeiin  views  . . .)  feir  elilfe'rent  types  of  u])elat.e?  operatieins  (inse'rtion, 
de'letieMi,  re'placement).  Derive  necessary  iuid  snllicient  conelitienis  for  the  consis¬ 
tency  of  such  views. 

•  Extenel  our  moekl  eif  view  upelate  jirograms  to  cover  recursively  delined  upelate; 
jirograms.  Neite  that  such  an  extension  woulel  re;iiiiirc  the  cajiability  of  handling 
view  mid  database  update's  which  are  partial  oiierations. 
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•  Study  the  interaction  between  ditferent  views. 

•  Find  algorithms  to  compute  <dl  possible  translation  functions  for  a  given  static  view 
in  order  to  obtain  a  consistent  dynamic  vi(!w.  Our  ongoing  research  shows  that 
there  exists  a  strong  relationship  between  the  set  of  different  consistent  translation 
functions  and  the  set  of  all  spanning  trees  of  a  directefl  graph.  (This  result  has 
not  yet  been  proved  in  full  g<‘nerality  but  only  for  some  particular  chissc-s  of  static 
views.)  Therefore  wo  think  that  it  could  bo  useful  to  tak('  profit  of  existing  graph 
theoretic  algorithms  in  order  to  generate  translation  functions. 

•  Given  <ui  inconsistent  view  V,  find  methodologies  for  splitting  V  into  two  or  more 
consistent  views  whose  sets  of  oper.ations  are  subsists  of  the  set  of  opiTations  of  V . 
With  such  a  splitting  it  is  possible  to  rejilace  a  program  P  that  originally  op('rates 
on  the  inconsistent  view  V  by  a  program  P’  which  switches  Ix'tween  different 
consistent  views  (for  example  through  cx])licit  switching  primitives).  The  parts 
of  P’  that  are  executed  r.omidotcly  within  one  consistent  view  can  be  modified  as 
long  as  their  functional  seimmtics  <ire  not  affected.  All  advantages  jirovidcd  by 
consistent  views  apjily  to  these  program  parts. 
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APPENDIX 


Beforo  giving  the  proof  that  <4  and  <5  are  rt-/3-dccisive,  let  us  stcite  a  simple  lemma. 

LEMMA. 

a)  (X$Z  A  Y$Z  A  card(X)  =  card(Y))  =>  X  =  Y. 

b)  (X@Z  A  Y$Z  A  card(X)  =  c.-mUY))  =>  X  =  Y. 

The  trivial  proof  of  this  lemma  is  omitted. 

PROPOSITION. 

a)  <4  is  a4-/34-dccisive. 

b)  <5  is  a5-/35-decisivc. 


PROOF,  a)  Assume  <4  is  not  a4-/34-d(H:isive.  Then  tlu'rc  exist  two  <lataba.sc  states 
d  =  (b,p)  and  d'  =  (b'.p')  such  that 

(b,p)  /- (b',p')  (a) 


and 


and 


«4  0),P)  =  «4(i>',p') 


/3{f),p)  T4  /?(1>',P') 


From  (a)  ami  (b)  it  follows: 


b  =  b' 

From  (c)  it  follows  that  there  exists  a  p”  with: 

p”  C  p  A  p”  C  p' 


(b) 


(e) 

(d) 


cind 

p(BROKEN  =  true)  =  p' (BROKEN  =  true)  =  p”  (BROKEN  =  tnie)  (f) 
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and 

VI  <  n  <  100  : 

p(BROKEN  =  false  A  PRODUCT#  =  ii)  [PIECE#]  $  (g) 

p" (BROKEN  false  A  PRODUCT#  ^  u)[riECE#]. 

and 

VI  <  n  <  100  : 

p' (BROKEN  =  false  A  PRODUCT#  =  n)  [PIECE#]  $  (g) 

p" (BROKEN  =  false  A  PRODUCT#  =  n)[PIECE#]. 

Furthermore  it  follows  from  (b)  by  definition  of  0:4: 

VI  <  n  :  card (p (BROKEN  =  hilse  A  PIECE#  =  n))  = 

card (p' (BROKEN  =  false  A  PIECE#  =  n)).  (h) 

It  follows  immediately; 

VI  <  n  ;  card(p(BROKEN  =  false  A  PIECE#  =  n) [PIECE#])  = 

card (p' (BROKEN  =  false  A  PIECE#  =  n)[PIECE#]).  (i) 

I'Vom  (g)  and  (i),  by  our  Lemma,  it  follows: 

VI  <  n  <  100  ; 

p' (BROKEN  =  fidse  A  PRODUCT#  =  n)  [PIECE#]  =  (j) 

l)(BROKEN  =  false  A  PRODUCT#  -  n) [PIECE#]. 

By  the  intc'grity  constraints  c  and  d  given  in  section  3  we  know  tlnat  1  <  p. PRODUCT# 
<  100  and  1  <  p'. PRODUCT#  <  100. 

Then'fore  from  (j)  we  conclude 


p' (BROKEN  =  fivlse)  =  p(BROKEN  =  false) 


(k) 


Putting  together  (k)  and  (f)  we  immediately  get: 

p'  =P 
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but  this,  together  with  (d)  is  in  contradiction  with  (a).  Q.E.D. 

b)  The  proof  is  similar  to  the  one  of  case  a). 


